xorg-x11-server-21.1.21-8.1 on GA media (moderate)

xorg-x11-server-21.1.21-8.1 on GA media Announcement ID: openSUSE-SU-2026:11244-1 Rating: moderate Cross-References: CVE-2026-55999 CVE-2026-56000 CVSS scores: CVE-2026-55999 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-55999 SUSE : 7.3...

Fedora 44 : python-tornado (2026-0f40de2581)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0f40de2581 advisory. Update to 6.5.7 - CVE-2026-35536 rhbz2457335, CVE-2026-31958 rhbz2451660 Tenable has extracted the preceding description block directly from the...

Fedora 43 : python-tornado (2026-23656e6d2f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-23656e6d2f advisory. Update to 6.5.7 - CVE-2026-35536 rhbz2457335, CVE-2026-31958 rhbz2451660 Tenable has extracted the preceding description block directly from the...

OPENSUSE-SU-2026:11260-1 patch-2.8-3.1 on GA media

These are all security issues fixed in the patch-2.8-3.1 package on the GA media of openSUSE Tumbleweed...

traefik2-2.11.52-1.1 on GA media (moderate)

traefik2-2.11.52-1.1 on GA media Announcement ID: openSUSE-SU-2026:11243-1 Rating: moderate Cross-References: CVE-2026-54763 CVE-2026-54764 CVSS scores: CVE-2026-54763 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2026-54763 SUSE : 7.8...

SUSE SLES15: terraform-provider-aws / terraform-provider-azurerm / etc (SUSE-SU-2026:2850-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2850-1 advisory. This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google,...

nginx: Fix of CVE-2026-49975

CVE-2026-49975: add maxheaders directive default 1000 to cap HTTP/2 request-header memory exhaustion HTTP/2 Bomb...

CVE-2026-56296

creationtimestamp| type| source ---|---|--- 2026-07-11 14:40:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevevaz5z2z 2026-07-11 15:36:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqeyjfs3bh2x...

CVE-2026-61448

creationtimestamp| type| source ---|---|--- 2026-07-11 14:37:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqevafnkle2e 2026-07-11 15:28:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqey2ecj722e 2026-07-11 17:07:04+00:00| seen|...

CVE-2026-61442

creationtimestamp| type| source ---|---|--- 2026-07-11 14:37:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqev7ncnku2y 2026-07-11 15:31:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqey7v5mzl2q 2026-07-11 17:10:08+00:00| seen|...

CVE-2026-61858

creationtimestamp| type| source ---|---|--- 2026-07-11 14:36:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqev6fbpkh2f 2026-07-11 15:32:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqeycuucpf24...

CVE-2026-61426

creationtimestamp| type| source ---|---|--- 2026-07-11 14:34:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqev32nalm2w 2026-07-11 15:01:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqewlawlq62k 2026-07-11 16:27:34+00:00| seen|...

CVE-2026-61439

creationtimestamp| type| source ---|---|--- 2026-07-11 14:29:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqeuscng642d 2026-07-11 15:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqewlowpp32d 2026-07-11 16:22:33+00:00| seen|...

CVE-2026-61454 Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__

The Grav Admin2 plugin getgrav/grav-plugin-admin2 before 2.0.4 embeds a global JavaScript variable window.GRAVCONFIG in the Admin2 SPA bootstrap page at /grav/admin and its subroutes. This object is returned in every unauthenticated response and discloses the server URL, API prefix, admin base...

MINI-RFPM-3V37-2WJ6

Bulletin has no description...

CVE-2026-15010

creationtimestamp| type| source ---|---|--- 2026-07-11 07:37:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5qoz5cx22 2026-07-11 07:37:19+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqe5qog3a22o 2026-07-11 08:07:12+00:00| seen|...

CVE-2026-1382

creationtimestamp| type| source ---|---|--- 2026-07-11 07:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe5nsp6du26 2026-07-11 07:37:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5rdvvic2x...

CVE-2026-12738

creationtimestamp| type| source ---|---|--- 2026-07-11 07:32:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqe5ibgnnh27 2026-07-11 07:34:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqe5madgpn2e...

EUVD-2026-43164

The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4 via the setupSources function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-7655

creationtimestamp| type| source ---|---|--- 2026-07-11 06:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116899815763339331 2026-07-11 06:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqdydvch3z2d 2026-07-11 06:31:25+00:00| seen|...