Oracle Linux 10 : krb5 (ELSA-2026-19145)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19145 advisory. 1.21.3-10.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.3-10 - Fix NegoEx parsing vulnerabilities CVE-2026-40355, CVE-2026-4035...

Oracle Linux 10 : go-fdo-server (ELSA-2026-19137)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19137 advisory. - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 43 : perl-DBI (2026-71d7e4d1da)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-71d7e4d1da advisory. 1.650 bump - Fix CVE-2026-14739, CVE-2026-14740 and CVE-2026-14380 Tenable has extracted the preceding description block directly from the Fedora...

mod_http2 security update

2.0.29-4.2 - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 2.0.29-4.1 - Resolves: RHEL-182410 - modhttp2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 2.0.29-4 - Resolves: RHEL-166269 - httpd: Apache HTTP Server: HTTP/2 DoS by...

python313-Pillow-12.3.0-2.1 on GA media (moderate)

python313-Pillow-12.3.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11283-1 Rating: moderate Cross-References: CVE-2026-54058 CVE-2026-54060 CVE-2026-55380 CVE-2026-59198 CVE-2026-59200 CVE-2026-59204 CVSS scores: CVE-2026-54058 SUSE : 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H...

Oracle Linux 10 : kernel (ELSA-2026-39494)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-39494 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Fedora 43 : mingw-glib2 (2026-8e39f35701)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8e39f35701 advisory. Backport fix for CVE-2026-58016. ---- Update to glib-2.86.5. Tenable has extracted the preceding description block directly from the Fedora security...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-26566)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-26566 advisory. - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolve...

Oracle Linux 10 : httpd (ELSA-2026-34109)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-34109 advisory. - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers CVE-2026-34356 - Resolves: RHEL-186195 ...

Oracle Linux 10 : skopeo (ELSA-2026-29035)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-29035 advisory. - Rebuild for CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 6, 2026 to July 12, 2026)

Last week, there were 311 vulnerabilities disclosed in 254 WordPress Plugins and 8 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 167 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

GHSA-74J5-XF3V-CRQ8 vulnerabilities

Vulnerabilities for packages: datadog-agent, vitess, kubernetes-dns-node-cache...

CVE-2026-50274 vulnerabilities

Vulnerabilities for packages: datadog-agent, vitess, kubernetes-dns-node-cache...

GHSA-29GW-9793-FVW7 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

Begun, the Patch Wars have

Welcome to this week's edition of the Threat Source newsletter. We all knew, to some degree or another, that this summer was going to a hot mess. I don't mean FIFA drama or record setting heat waves. I mean the slow but steady momentum that AI frontier models were accruing for vulnerability...

SUSE-SU-2026:3088-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example bsc1269791. - CVE-2026-53404: always-incorrect control flow implementation in the rewrite valve caus...

USN-8557-1: Authlib vulnerabilities

Jay Neiva and Mauro Carrillo discovered that Authlib did not properly validate cryptographic keys embedded in JWT headers. An attacker could possibly use this issue to forge trusted tokens, resulting in authentication and authorization bypass. CVE-2026-27962 Jay Neiva and Mauro Carrillo discovere...

vulnerabilities handled in Mozilla Firefox

Mozilla has identified vulnerabilities in Firefox, specifically in version 152.0.6. Through a combination of two vulnerabilities, malicious actors can execute malicious code on victims’ systems remotely. For successful exploitation, users must visit a malicious website or a legitimate website wit...

Vulnerabilities in Adobe ColdFusion

Adobe has addressed several vulnerabilities in Adobe ColdFusion versions 25.10, 23.21, and earlier versions. These vulnerabilities can lead to the following categories of damage: - Arbitrary code execution - Improper elevation of privileges - Reading of arbitrary files - Evasion of security...

ROOT-APP-MAVEN-CVE-2026-34360 CVE-2026-34360 in io.root.ca.uhn.hapi.fhir:org.hl7.fhir.core - Patched by Root

Root has patched CVE-2026-34360 in the io.root.ca.uhn.hapi.fhir:org.hl7.fhir.core package for Root:Maven. Multiple fixed versions available...