PT-2026-60576

Name of the Vulnerable Software and Affected Versions OPSWAT AppRemover versions prior to 2017.10.02.1551 Description An issue exists in the IOCTL handler 0x2420031 of the OPSWAT AppRemover Driver ardrv.sys. This flaw allows any local user to open the device and send process termination requests...

The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework allows a attacker to gain access to read, modify, or delete data.

The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...

Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1933)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1933 advisory. The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result ...

PT-2026-60685

Name of the Vulnerable Software and Affected Versions Envoy Gateway versions prior to 1.7.4 Envoy Gateway versions prior to 1.8.1 Description The to absolute normalized path function security.lua:28-43 fails to collapse redundant path separators, such as converting // to /. Due to POSIX path...

SUSE SLES15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:3029-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3029-1 advisory. This update for glibc fixes the following issues - CVE-2026-5435: unchecked buffer writing in TSIG handling can lead to an...

Amazon Linux 2023 : aws-nitro-tpm-tools (ALAS2023-2026-1905)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1905 advisory. A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate...

Mattermost Server 10.11.x < 10.11.20 / 11.6.x < 11.6.5 / 11.7.x < 11.7.3 Multiple Vulnerabilities (MMSA-2026-00658, MMSA-2026-00676, MMSA-2026-00680, MMSA-2026-00683, MMSA-2026-00688, MMSA-2026-00689, MMSA-2026-00690)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities as referenced in the MMSA-2026-00658, MMSA-2026-00676, MMSA-2026-00680, MMSA-2026-00683, MMSA-2026-00688, MMSA-2026-00689, MMSA-2026-00690 advisories. - Mattermost versions 11.7.x = 11.7.2, 11.6....

Oracle Linux 10 : glibc (ELSA-2026-500006)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500006 advisory. - resolv: Check hostname for validity CVE-2026-4438 - resolv: Count records correctly CVE-2026-4437 Tenable has extracted the preceding description...

PT-2026-60473

Name of the Vulnerable Software and Affected Versions HCL DFXAnalytics affected versions not specified Description A buffer overflow exists because the application fails to properly validate input sizes. This allows an attacker to send an excessive amount of data into a memory container,...

AlmaLinux 8 : nodejs:24 (ALSA-2026:39868)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:39868 advisory. ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:3043-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3043-1 advisory. This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. -...

Notepad++ < 8.9.7 Multiple Vulnerabilities

The version of Notepad++ installed on the remote host is prior to 8.9.7. It is, therefore, affected by multiple vulnerabilities: - A security bypass vulnerability exists in session.xml backupFilePath handling due to an incomplete startswith check. An attacker could exploit this to bypass path...

PT-2026-60600

Name of the Vulnerable Software and Affected Versions Quicly versions prior to commit dccf5d4 Description Quicly, an IETF QUIC protocol implementation used in the H2O HTTP server, is susceptible to stateless reset injection. The issue stems from a lack of packet entry validation when handling...

flatpak security update

1.16.0-9.1 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157...

Linux Distros Unpatched Vulnerability : CVE-2026-15778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer...

dnsmasq security update

2.90-7 - Prevent overflow in extractname function CVE-2026-2291 - Prevent DoS in DNSSEC validation CVE-2026-4890 - Prevent out-of-bounds read in DNSSEC validation CVE-2026-4891 - Prevent out-of-bounds write in DHCPv6 server CVE-2026-4892 - Prevent source check avoidance by RFC 7871 client-subnet...

Linux Distros Unpatched Vulnerability : CVE-2026-50524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. CVE-2026-50524 Note that Nessus...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : .NET vulnerabilities (USN-8553-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8553-1 advisory. Artur Stetsko discovered that the .NET did not properly validate authentication data. An attacker could possibly use this issue t...

Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. Security Fixes: jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution...

Alibaba Cloud Linux 3 : 0198: podman and buildah (ALINUX3-SA-2026:0198)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0198 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-25679: url.Parse insufficiently...