Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out_http output plugin allows placeholders such as ${tag} in the endpoint configuration parameter, and if a placeholder value is derived from untrusted input an attacker can control the destination hostname of outbound HTTP requests and force requests to arbitrary internal services. This issue is fixed in version 1.19.3.

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory.

  - Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud     Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low     privileged attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. While the     vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products     (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud     Applications. (CVE-2026-101446)

  - Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI (Ruby)).
    Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Siebel CRM End User. Successful     attacks of this vulnerability can result in takeover of Siebel CRM End User. (CVE-2026-54906)

  - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface     (Apache Tomcat)). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.
    Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification     access to critical data or all Siebel CRM Deployment accessible data as well as unauthorized access to     critical data or complete access to all Siebel CRM Deployment accessible data. (CVE-2026-24733,     CVE-2026-41284, CVE-2026-43513, CVE-2026-43515, CVE-2026-59083)

  - Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing).
    Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged     attacker with network access via SQL to compromise Siebel Apps - Life Sciences. Successful attacks of this     vulnerability can result in takeover of Siebel Apps - Life Sciences. (CVE-2026-101457)

  - Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval     Manager). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Siebel CRM Development. Successful     attacks require human interaction from a person other than the attacker. Successful attacks of this     vulnerability can result in takeover of Siebel CRM Development. (CVE-2026-101495)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the rubygem package has been released.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS,
    Hadoop and so on. Prior to 1.19.3, the Fluentd out_http output plugin allows placeholders such as ${tag}
    in the endpoint configuration parameter, and if a placeholder value is derived from untrusted input an
    attacker can control the destination hostname of outbound HTTP requests and force requests to arbitrary
    internal services. This issue is fixed in version 1.19.3. (CVE-2026-44161)

ID	Name	Product	Family	Type	Severity
370447	Oracle Siebel Server <= 26.8 (October 2026 CPU)	Nessus	Misc.	Local	high
337982	Photon OS 5.0: Rubygem PHSA-2026-5.0-91-0960	Nessus	PhotonOS Local Security Checks	Local	critical
333802	Photon OS 5.0: Rubygem PHSA-2026-5.0-92-0927	Nessus	PhotonOS Local Security Checks	Local	critical
329206	Photon OS 5.0: Rubygem PHSA-2026-5.0-0927	Nessus	PhotonOS Local Security Checks	Local	critical
444010	SCA: security update for fluentd (GHSA-72f5-rr8c-r6gr)	Tenable Cloud Security	SCA Checks	Local	high
444010	SCA: security update for fluentd (GHSA-72f5-rr8c-r6gr)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-44161

high

Tenable Plugins

Coming Soon

high

critical

critical

critical

high

high