ROS-20260724-73-0027

The vulnerability in dotnet10.0 is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260724-73-0026

The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260724-73-0021

The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Oracle Linux 10 : buildah (ELSA-2026-36199)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36199 advisory. - rebuild for CVE-2026-39822 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Rebuild for CVE-2026-25679 Tenable has extracted the...

Oracle Linux 10 : openssl (ELSA-2026-22314)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22314 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...

ROS-20260724-73-0020

The vulnerability in dotnet10.0 is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

ROS-20260724-73-0028

The vulnerability in dotnet10.0 is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260724-73-0032

The vulnerability in dotnet10.0 is related to incorrect validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260724-73-0024

The vulnerability in dotnet10.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Oracle Linux 10 : podman (ELSA-2026-37072)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-37072 advisory. - rebuild for CVE-2026-39822 - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832 CVE-2026-39835 - fixes CVE-2026-57231 CVE-2026-25681...

CVE-2026-48013 Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the /api/action/media/external-link endpoint allows authenticated admin users to make server-side HTTP HEAD requests to arbitrary internal IP addresses. While the parallel uploadFromURL flow validates target IPs against...

EUVD-2026-48089

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

CVE-2026-65474

Unauthenticated Sensitive Data Exposure in Ninja Tables = 5.2.10 versions...

SUSE-SU-2026:22917-1 Security update for afterburn

This update for afterburn fixes the following issues Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2022-24713: regex: high complexity when parsing regexes with large repetitions on empty sub-expressions can lead to DoS bsc1196972. - CVE-2024-12224: idna: privilege escalatio...

WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.10.0 - Unknown vulnerability

Unknown vulnerability discovered by dodoh4t in WordPress Plugin Falcon – WordPress Optimizations & Tweaks versions = 2.10.0...

RHSA-2026:44066 Red Hat Security Advisory: pki-deps:10.6 security update

Bulletin has no description...

RHSA-2026:41898 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:41897 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

Bulletin has no description...

EUVD-2026-47888

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10...

mariadb-connector-c security update

An update is available for mariadb-connector-c. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The MariaDB Native Client library C driver is used to connect...