CVE-2026-101944: Integer Overflow or Wraparound

An Integer Overflow or Wraparound vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer...

CVE-2026-102027: Incorrect Calculation of Buffer Size

An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP neighbor to cause an rpd crash via BGP labeled-unicast UPDATEs when the affected multipath features are enabled...

Photon OS 5.0: Lz4 PHSA-2025-5.0-0677

An update of the lz4 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0677. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid36591...

Oracle Linux 8 : hplip (ELSA-2026-82295)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82295 advisory. 3.26.6-3 - Fix LEDM scanning 3.26.6-2 - fix OSH issues 3.26.6-1 - Rebase to 3.26.6 Tenable has extracted the preceding description block directly from...

CVE-2026-97381

Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...

Microsoft Patch Tuesday, October 2026 Security Update Review

Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to navigate an evolving threat landscape, applying security patches promptly remains critical to reducing exposure and strengthening...

CVE-2026-96939

Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-85365

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-85318

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-83863

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-83719

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-83506

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-96939

A Time-of-check time-of-use (TOCTOU) race condition exists in Servicing Stack Updates , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-367 and carries a HIGH base severity score of 7.0. No specific exploit code or in-the-wild e...

EUVD-2026-100264

Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-83863

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High) . No specific information regarding exploitatio...

CVE-2026-83506

An untrusted search path vulnerability in Servicing Stack Updates allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-426 and has a HIGH base severity score of 7.8 . While the vulnerability is confirmed, specific details regarding affec...

CVE-2026-85835

A buffer over-read vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to disclose information locally. The vulnerability has a Medium severity (CVSS 3.1 score of 5.5) and requires local access and low privileges. No specific exploit code or information on in...

CVE-2026-85365

A Heap-based buffer overflow exists in Servicing Stack Updates , which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.0, indicating high severity. Remediation is provided via an official fix from Microsoft. No specific exploi...

CVE-2026-85318

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-122 and has been assigned a HIGH severity score of 7.8. No specific exploit details or links ar...

CVE-2026-83719

A buffer over-read vulnerability exists in Servicing Stack Updates , which allows an authorized attacker to disclose information locally . The vulnerability is associated with a MEDIUM severity rating (CVSS 3.1: 5.5) and is characterized by a LOCAL attack vector with LOW complexity. No specific e...