CVE-2026-62764

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...

EUVD-2026-45154

Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo. An authenticated, but low-privileged user without system permissions may issue a remote command to gracefully shutdown system components compaction-coordinator, compactor, gc, manager, monitor, tserver, or sserver,...

CVE-2026-53163 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53163 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-52928 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-52928 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53138 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53138 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53157 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53157 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53325 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53325 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-52909 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-52909 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53151 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53362 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53362 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the media upload. An attacker can access unauthorized network resources by submitting crafted input paths that are processed by the upload feature. Th...

Allocation of Resources Without Limits or Throttling

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the configured input path. An attacker can exhaust gateway worker resources and reduce availability by supplying specially crafted...

PT-2026-60739

A security vulnerability has been detected in sagold json-schema-library 11.5.0/11.5.1. This impacts the function parsePropertyDependencies of the file src/keywords/propertyDependencies.ts. The manipulation leads to improperly controlled modification of object prototype attributes. The attack can...

PT-2026-60806

Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in...

Oracle Linux 10 : python3.14-pip (ELSA-2026-36193)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36193 advisory. 25.2-5 - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pipinstallupgrade to run pip-3.14 - fix bash completion +...

Fedora 43 : firefox (2026-365cce949c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-365cce949c advisory. - New upstream release 152.0.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the transfer. An attacker can cause a panic and disrupt DNS service availability by sending an AXFR request to a zone configured with k8sexternal headless-service zone transfers when a headless service endpoint...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the ResponseReverter. An attacker can cause the application to panic and degrade availability or crash the process by sending a specially crafted DNS query that triggers a nil pointer dereference when a...

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

CVE-2026-15737

CVE-2026-15737 affects the AWS Bedrock AgentCore Python SDK. Unintended logging of sensitive user content occurs in the OpenTelemetry instrumentation for SDK versions 1.4.8 and 1.5.0, where raw user prompts and complete agent responses were written into OpenTelemetry span attributes on every invo...