PT-2026-87320

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

PT-2026-87259

🛡️ SQL Server’s latest flaw won’t steal headlines—just potentially sensitive data. Patch CVE-2026-68781 carefully: CU and GDR fixes aren’t interchangeable, because even patches need compatibility checks. https://t.co/dhlxOYJPxF MicrosoftSecurity Msrc Cve202668781 https://t.co/XChTqF3OGv...

PT-2026-87937

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

GraphicsMagick-1.3.48-2.1 on GA media (moderate)

GraphicsMagick-1.3.48-2.1 on GA media Announcement ID: openSUSE-SU-2026:11692-1 Rating: moderate Cross-References: CVE-2025-55154 CVSS scores: CVE-2025-55154 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-55154 SUSE : 8.5...

PT-2026-87291

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...

PT-2026-87307

Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network...

PT-2026-87932

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

PT-2026-87975

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

PT-2026-87400

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

K000163173: Linux kernel MRP vulnerability CVE-2026-53245

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrppduparsevecattr In mrppduparsevecattr, vector attribute events are encoded three per byte and valen tracks the number of events left to process. The...

Linux Distros Unpatched Vulnerability : CVE-2026-78129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption. CVE-2026-78129 Note that Nessus relies on the presence of the package as reported by th...

Linux Distros Unpatched Vulnerability : CVE-2026-78134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

trivy-0.74.0-3.1 on GA media (moderate)

trivy-0.74.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11691-1 Rating: moderate Cross-References: CVE-2026-56855 CVSS scores: CVE-2026-56855 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56855 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

Linux Distros Unpatched Vulnerability : CVE-2026-81738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out- of-bounds write via crafted DOMAIN-SEARCH entries...

CVE-2020-16911

creationtimestamp| type| source ---|---|--- 2026-09-04 08:00:05+00:00| seen| https://t.me/timcorehacking/1025 2026-09-05 01:00:36+00:00| seen| https://t.me/timcorehacking/1025...

helm3-3.21.3-7.1 on GA media (moderate)

helm3-3.21.3-7.1 on GA media Announcement ID: openSUSE-SU-2026:11669-1 Rating: moderate Cross-References: CVE-2026-37236 CVSS scores: CVE-2026-37236 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-37236 SUSE : 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N...

libmsgpack-c2-7.0.2-2.1 on GA media (moderate)

libmsgpack-c2-7.0.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11672-1 Rating: moderate Cross-References: CVE-2026-72854 CVSS scores: CVE-2026-72854 SUSE : 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

Fedora 43 : python-pip (2026-30b4eb25df)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-30b4eb25df advisory. Security fixes for CVE-2026-13346 and CVE-2026-8643 Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2026-82526

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...

CVE-2026-82526 R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...