Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM WebSphere Hybrid Edition, are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary There are mulitple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM WebSphere Hybrid Edition, when the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 features are enabled...

Security Bulletin: IBM OpenPages is affected by multiple security vulnerabilities of DB2 Database Server (August 2026)

Summary IBM® Db2® Database Server is shipped as a supporting program of IBM OpenPages. Information about security vulnerabilities affecting IBM Db2 Database Server has been published in multiple security bulletins. Vulnerability Details Refer to the security bulletins listed in the...

CVE-2026-59568

CVE-2026-59568 covers multiple vulnerabilities in Zscaler Client Connector (ZCC) that allow an unauthenticated, unprivileged remote attacker to achieve remote code execution in the ZCC context. The CNA-assigned CVSS 3.1 score is 9.1 (CRITICAL) , with a network attack vector, low complexity, no pr...

CVE-2026-59568 Remote Code Execution

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...

RHSA-2026:58820 Red Hat Security Advisory: resource-agents security update

Bulletin has no description...

Vulnerabilities present in Atlassian products

Atlassian has hidden vulnerabilities in various products such as Bamboo, Bitbucket, Confluence, Jira, Crowd, and Fisheye. These vulnerabilities exist in various third-party products for which updates have already been released. Atlassian has incorporated these updates into its own products...

Security information for Hitachi Disk Array Systems

Overview CVE-2026-33828 | Windows Device Health Attestation DHA Elevation of Privilege Vulnerability CVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability CVE-2026-40404 | Windows Universal Disk Format File System Driver UDFS Elevation of Privilege...

ROOT-OS-DEBIAN-13-CVE-2026-5201 CVE-2026-5201 in gdk-pixbuf - Patched by Root

Root has patched CVE-2026-5201 in the gdk-pixbuf package for Root:Debian:13. Multiple fixed versions available...

[SECURITY] [DLA 4753-1] nvidia-graphics-drivers new upstream security update

Debian LTS Advisory DLA-4753-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost August 24, 2026 https://wiki.debian.org/LTS Package : nvidia-graphics-drivers Version : 535.309.01-0+deb12u1 CVE ID : CVE-2025-23280 CVE-2025-23282 CVE-2025-23300 CVE-2025-23330...

PT-2026-80887

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Remote code execution flaws allow an unauthenticated and unprivileged user to execute arbitrary code within the ZCC context. This issue affects Windows, macOS, and mobile...

Debian dla-4753 : firmware-nvidia-gsp - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4753 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4753-1 [email protected]...

PT-2026-85330

TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 3.2.7-tuxcare.1...

GLSA-202608-22 : needrestart: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-22 needrestart: Multiple vulnerabilities Multiple vulnerabilities have been discovered in needrestart. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block...

PT-2026-80886

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Multiple issues allow local privilege escalation, enabling an unprivileged user to execute arbitrary code within a privileged context. Recommendations At the moment, there is...

FreeBSD : traefik -- Multiple vulnerabilities (b22fee3d-9f14-11f1-b948-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b22fee3d-9f14-11f1-b948-5404a68ad561 advisory. The traefik project releases a new version addressing multiple vulnerabilities: Tenable has extracted t...

Fedora 45 : python-aiohttp (2026-e76e1f737b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e76e1f737b advisory. Automatic update for python-aiohttp-3.14.3-3.fc45. Changelog Mon Aug 24 2026 Benjamin A. Beasley - 3.14.3-3 - Preemptively patch for Cython 3.3...

MiracleLinux 9 : java-17-openjdk-17.0.20.0.8-1.2.el9.ML.1 (AXSA:2026-1630:13)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1630:13 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...

Microsoft .net Core SEoL (8.x)

According to its version, Microsoft .net Core is 8.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Debian dla-4752 : firmware-nvidia-gsp - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4752 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4752-1 [email protected]...

Microsoft .net Core SEoL (10.x)

According to its version, Microsoft .net Core is 10.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...