CVE-2026-66464

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

CVE-2026-48386

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...

CVE-2026-17886 vulnerabilities

Vulnerabilities for packages: chromium...

ROOT-OS-DEBIAN-11-CVE-2026-46187 CVE-2026-46187 in linux - Patched by Root

Root has patched CVE-2026-46187 in the linux package for Root:Debian:11. Multiple fixed versions available...

SUSE CVE-2026-17802

Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CLEANSTART-2026-IT30103 Security fixes in prometheus-node-exporter 1.10.2-r1

Package prometheus-node-exporter version 1.10.2-r1 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-CX37919 Security fixes in prometheus-mysqld-exporter-fips 0.19.0-r0

Package prometheus-mysqld-exporter-fips version 0.19.0-r0 fixes 1 vulnerabilities: CVE-2026-26958...

CLEANSTART-2026-QU37048 Security fixes in wait-for-port 1.0.10-r6

Package wait-for-port version 1.0.10-r6 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

RHEL 10 : kernel (RHSA-2026:47620)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47620 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: sched: UAF via missing handler f...

CVE-2026-16357 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-62427

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and platform operations are used by the control domain or a possible Xenstore domain. Some of these operations may not be executed in paralle...

Siemens SIMATIC S7-1500 CPU 1518 MFP Out-of-bounds Write (CVE-2026-31402)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505787; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Linux Distros Unpatched Vulnerability : CVE-2026-55833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding...

AlmaLinux 9 : compat-openssl11 (ALSA-2026:44438)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:44438 advisory. openssl: Heap Use-After-Free in OpenSSL PKCS7verify CVE-2026-45447 Tenable has extracted the preceding description block directly from the AlmaLinux security...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, lerna, sqlpad, prism, code-server, kubeflow-centraldashboard, pulumi, ts-patch, eslint, vitess...

CVE-2026-60807

CVE-2026-60807 —Oracle E-Business Suite, Oracle Bills of Material (Internal Operations) is affected in versions 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges, after user interaction from a target, can compromise Oracle Bills of Material, potentially leading to takeo...

SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2026:3125-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3125-1 advisory. - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser bsc1268971. - CVE-2026-14935: webrtcbin accept...

UBUNTU-CVE-2026-63847

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587...

CVE-2026-50493 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

SUSE-SU-2026:2948-1 Security update for perl-HTML-Parser

This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in decodeentities bsc1267606...