CVE-2026-106458: Incorrect Authorization

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...

Fedora 43 : kernel (2026-754bab2c40)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-754bab2c40 advisory. The 7.2.9 stable kernel update contains a number of important fixes across the tree Tenable has extracted the preceding description block directly from the...

Oracle Linux 10 : nodejs22 (ELSA-2026-75864)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75864 advisory. 1:22.23.1-4.0.1 - Add c-ares as dependency orabug 39781219 Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2026-84900 HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP10 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. Previous versions of HP ThinPro prior to HP ThinPro 9 SP3 could potentially contain...

Astra Linux – Vulnerability in WebKit2GTK

A memory corruption issue has been resolved through improved state management. This issue is fixed in tvOS 15.5, iOS 15.5, iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, and Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution...

Astra Linux – Vulnerability in WebKit2GTK

An access issue has been resolved through improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, and watchOS 10.3. A maliciously crafted webpage may be able to obtain user information...

Astra Linux – Vulnerability in WebKit2GTK

This issue has been resolved through improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, and watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

Fedora 44 : cri-o1.36 (2026-f5c88f763a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f5c88f763a advisory. - Update to release v1.36.6 - Resolves: rhbz2537559 - Resolves CVE-2026-17113: rhbz2523493 - Resolves: rhbz2540885 Tenable has extracted the preceding...

Fedora 45 : kernel (2026-8dc7d1def3)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8dc7d1def3 advisory. The 7.2.9 stable kernel update contains a number of important fixes across the tree Tenable has extracted the preceding description block directly from the...

Fedora 45 : openssl (2026-06c29a2cb4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-06c29a2cb4 advisory. Rebase to OpenSSL 4.0.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

dnspython

dnspython INTRODUZIONE dnspython è un toolkit DNS per Python. Supporta quasi tutti i tipi di record. Può essere utilizzato per query, trasferimenti di zona e aggiornamenti dinamici. Supporta messaggi autenticati TSIG ed EDNS0. dnspython fornisce sia un accesso di alto che di basso livello al DNS...

Fedora 44 : nanosvg (2026-4718fc201a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4718fc201a advisory. Apply fix for CVE-2026-88367. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Fedora 44 : openssl (2026-12f3f3d569)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-12f3f3d569 advisory. Rebase to OpenSSL 3.5.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 43 : openvpn (2026-d2c4c4794c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d2c4c4794c advisory. Update to upstream OpenVPN 2.6.23 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : xdg-dbus-proxy (2026-f10257ca80)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f10257ca80 advisory. Update to 0.1.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : fetchmail (2026-8ffc03a2ce)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ffc03a2ce advisory. Update to fetchmail-6.6.8 CVE-2026-94184 ---- Update to fetchmail-6.6.7 Tenable has extracted the preceding description block directly from the Fedora securi...

HP ThinPro 8.1 SP10 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP10 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. All of the identified vulnerabilities listed above were addressed and fixed as part o...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2024-53677, CVE-2025-23184)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2024-53677 DESCRIPTION: File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this ca...

Rocky Linux 9.2 [CIQ] Security Update: grafana-pcp / grafana-pcp-debuginfo / grafana-pcp-debugsource (ciqsa-2026_1064)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261064 advisory. This advisory aggregates security fixes for the grafana-pcp SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-1394. Tenable has extracted the preceding descriptio...

Rocky Linux 8.8 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel / etc (ciqsa-2026_1034)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261034 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-52425. Tenable has extracted the preceding description blo...