CVE-2026-18510

CVE-2026-18510 affects TranslatePress – Translate Multilingual (WordPress) up to version 3.2.6. Root cause: insufficient input sanitization and output escaping, enabling unauthenticated stored XSS via Comment Content. Attackers can inject arbitrary scripts in pages viewed by users; payloads use W...

RHEL 10 : libXfont2 (RHSA-2026:51061)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51061 advisory. X.Org X11 libXfont2 runtime library Security Fixes: libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001...

EulerOS 2.0 SP13 : python3 (EulerOS-SA-2026-2995)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : User-controlled header names and values containing newlines can allow injecting HTTP headers.CVE-2026-0865 Tenable has extracted the preceding...

EulerOS 2.0 SP13 : haproxy (EulerOS-SA-2026-3018)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:3502-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3502-1 advisory. This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled...

Fedora 43 : trafficserver (2026-144d6c9bcc)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-144d6c9bcc advisory. Update to upstream 10.1.4 Resolves: - CVE-2026-22068 - Unanchored regular-expression matching allows ACL and policy bypass - CVE-2026-33267 -...

EulerOS 2.0 SP15 : haproxy (EulerOS-SA-2026-2886)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced...

EulerOS 2.0 SP13 : haproxy (EulerOS-SA-2026-2968)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced...

Fedora 43 : kernel (2026-edefd5c974)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-edefd5c974 advisory. The 7.1.6 stable kernel updates contain a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream wi...

Fedora 43 : tcpreplay (2026-838f697068)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-838f697068 advisory. Release notes: https://github.com/appneta/tcpreplay/releases/tag/v4.5.3 https://github.com/appneta/tcpreplay/releases/tag/v4.5.4...

CVE-2026-71319

creationtimestamp| type| source ---|---|--- 2026-08-05 22:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msekiznbnx2z 2026-08-05 22:26:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fsizpdnyrbkp 2026-08-05 23:01:06+00:00| seen|...

GHSA-4MRV-5P47-P938 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator...

CVE-2026-63263 vulnerabilities

Vulnerabilities for packages: ruby3.4-elasticsearch, ruby4.0-elasticsearch, ruby3.3-elasticsearch, ruby3.2-elasticsearch...

GHSA-4MRV-5P47-P938 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, kube-logging-operator, commercial-gitlab-rails-ee-fips...

CVE-2026-63263 vulnerabilities

Vulnerabilities for packages: ruby4.0-elasticsearch, ruby3.2-elasticsearch, ruby3.3-elasticsearch, ruby3.4-elasticsearch...

GHSA-5V5G-HVW6-X2X7 vulnerabilities

Vulnerabilities for packages: ruby4.0-elasticsearch, ruby3.2-elasticsearch, ruby3.3-elasticsearch, ruby3.4-elasticsearch...

GHSA-9FHM-53XW-H9C3 vulnerabilities

Vulnerabilities for packages: ruby4.0-elasticsearch, ruby3.2-elasticsearch, ruby3.3-elasticsearch, ruby3.4-elasticsearch...

CLSA-2026-1785954263 TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 9 CVEs. Fixed in 5.3.37-tuxcare.9...

CLSA-2026-1785947990 TuxCare security update for org.apache.commons:commons-compress (3 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 3 CVEs. Fixed in 1.15-tuxcare.1...

CVE-2026-7557

An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass authentication and impersonate any user, including administrators. This vulnerability affec...