CVE-2026-66464

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

CVE-2026-73238

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CVE-2026-66146

Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in SonicWall GMS version 9.5.1 (Build 9510.1044) and earlier versions. These flaws, categorized under CWE-79 , allow a remote attacker to execute malicious JavaScript in a user's browser. While the risk level is moderate, the ven...

CVE-2026-48386

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...

CVE-2026-17886 vulnerabilities

Vulnerabilities for packages: chromium...

Photon OS 5.0: Libtiff PHSA-2026-5.0-91-0757

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0757. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ALSA-2026:50141 Important: sg3_utils security, bug fix, and enhancement update

The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes: sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output...

DEBIAN-CVE-2026-58062

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

SUSE CVE-2026-17802

Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CLEANSTART-2026-QU37048 Security fixes in wait-for-port 1.0.10-r6

Package wait-for-port version 1.0.10-r6 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-IT30103 Security fixes in prometheus-node-exporter 1.10.2-r1

Package prometheus-node-exporter version 1.10.2-r1 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-NT47758 Security fixes in prometheus 2.27.1-r0

Package prometheus version 2.27.1-r0 fixes 1 vulnerabilities: CVE-2021-29622...

CLEANSTART-2026-KS78013 Security fixes in docker 19.03.14-r0

Package docker version 19.03.14-r0 fixes 1 vulnerabilities: CVE-2020-15257...

CLEANSTART-2026-CX37919 Security fixes in prometheus-mysqld-exporter-fips 0.19.0-r0

Package prometheus-mysqld-exporter-fips version 0.19.0-r0 fixes 1 vulnerabilities: CVE-2026-26958...

RHEL 10 : kernel (RHSA-2026:47620)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47620 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: sched: UAF via missing handler f...

CVE-2026-16357 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-62427

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in paralle...

Siemens SIMATIC S7-1500 CPU 1518 MFP Out-of-bounds Write (CVE-2026-31402)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505787; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Linux Distros Unpatched Vulnerability : CVE-2026-55833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding...

AlmaLinux 9 : compat-openssl11 (ALSA-2026:44438)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:44438 advisory. openssl: Heap Use-After-Free in OpenSSL PKCS7verify CVE-2026-45447 Tenable has extracted the preceding description block directly from the AlmaLinux security...