# SUSE-SU-2026:23863-1: govulncheck-vulndb security update SUSE-SU-2026:23863-1, released September 21, 2026, fixes 91 CVEs in govulncheck-vulndb (version 0.0.20260916T180043-160000.1.1). One of them is being exploited (CVE-2026-60004); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-23863-1 - Platform: Linux - Released: Sep 21, 2026 - Priority: Patch now (Closes CVE-2026-60004, exploited (CISA KEV)) - CVEs: 91, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:23863-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [govulncheck-vulndb](https://patchblox.com/security/data/product/linux/govulncheck-vulndb.md) | sles 16.0 | 0.0.20260916T180043-160000.1.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-60004](https://patchblox.com/security/data/cve/CVE-2026-60004.md) | Patch now | govulncheck-vulndb: GO-2026-6433 GHSA-rcr6-4jqh-j84m | n/a | 0.2399 | CISA KEV | | [CVE-2026-84445](https://patchblox.com/security/data/cve/CVE-2026-84445.md) | High | gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers | 7.5 | 0.0064 | | | [CVE-2026-73232](https://patchblox.com/security/data/cve/CVE-2026-73232.md) | High | ffuf: ffuf is a fast web fuzzer written in Go | 7.5 | 0.0063 | | | [CVE-2026-88018](https://patchblox.com/security/data/cve/CVE-2026-88018.md) | High | govulncheck-vulndb: GO-2026-6462 GHSA-xwwr-4h3p-r22c | n/a | 0.0051 | | | [CVE-2026-88044](https://patchblox.com/security/data/cve/CVE-2026-88044.md) | High | govulncheck-vulndb: GO-2026-6460 GHSA-p569-5gjg-9cmj | n/a | 0.0049 | | | [CVE-2026-88015](https://patchblox.com/security/data/cve/CVE-2026-88015.md) | High | govulncheck-vulndb: GO-2026-6461 GHSA-p6m2-r3w9-mpxw | n/a | 0.0036 | | | [CVE-2026-88046](https://patchblox.com/security/data/cve/CVE-2026-88046.md) | High | govulncheck-vulndb: GO-2026-6457 GHSA-38xv-hf3p-h7mq | n/a | 0.0029 | | | [CVE-2026-88017](https://patchblox.com/security/data/cve/CVE-2026-88017.md) | High | govulncheck-vulndb: GO-2026-6458 GHSA-c476-6w5q-jw77 | n/a | 0.0023 | | | [CVE-2026-88013](https://patchblox.com/security/data/cve/CVE-2026-88013.md) | High | govulncheck-vulndb: GO-2026-6463 GHSA-486v-q2wf-fp2r | n/a | 0.0019 | | | [CVE-2026-88016](https://patchblox.com/security/data/cve/CVE-2026-88016.md) | High | govulncheck-vulndb: GO-2026-6459 GHSA-f8g7-2xjc-7mfh | n/a | 0.0019 | | | [CVE-2026-88014](https://patchblox.com/security/data/cve/CVE-2026-88014.md) | High | govulncheck-vulndb: GO-2026-6464 GHSA-66hp-wgxq-6f5q | n/a | 0.0015 | | | [CVE-2026-69084](https://patchblox.com/security/data/cve/CVE-2026-69084.md) | Routine | govulncheck-vulndb: GO-2026-6377 GHSA-vh22-h7hf-www7 | n/a | 0.0157 | | | [CVE-2026-73667](https://patchblox.com/security/data/cve/CVE-2026-73667.md) | Routine | govulncheck-vulndb: GO-2026-6357 GHSA-2mw5-23gm-pccq | n/a | 0.0086 | | | [CVE-2026-73841](https://patchblox.com/security/data/cve/CVE-2026-73841.md) | Routine | govulncheck-vulndb: GO-2026-6358 GHSA-52gf-6rpq-fgmx | n/a | 0.0081 | | | [CVE-2026-72920](https://patchblox.com/security/data/cve/CVE-2026-72920.md) | Routine | govulncheck-vulndb: GO-2026-6351 GHSA-2v6v-25fm-p4fg | n/a | 0.0078 | | | [CVE-2026-75602](https://patchblox.com/security/data/cve/CVE-2026-75602.md) | Routine | govulncheck-vulndb: GO-2026-6368 GHSA-h6cj-26g5-67fv | n/a | 0.0069 | | | [CVE-2026-59161](https://patchblox.com/security/data/cve/CVE-2026-59161.md) | Routine | govulncheck-vulndb: GO-2026-6453 GHSA-q5j5-6p94-4gwc | n/a | 0.0066 | | | [CVE-2026-59162](https://patchblox.com/security/data/cve/CVE-2026-59162.md) | Routine | govulncheck-vulndb: GO-2026-6452 GHSA-fx5j-qcqg-grpf | n/a | 0.0066 | | | [CVE-2026-26292](https://patchblox.com/security/data/cve/CVE-2026-26292.md) | Routine | govulncheck-vulndb: GO-2026-6344 GHSA-rc56-rj3f-xggf | n/a | 0.0065 | | | [CVE-2026-73294](https://patchblox.com/security/data/cve/CVE-2026-73294.md) | Routine | govulncheck-vulndb: GO-2026-6435 GHSA-xp7j-h7jc-4w8p | n/a | 0.0065 | | | [CVE-2026-27780](https://patchblox.com/security/data/cve/CVE-2026-27780.md) | Routine | govulncheck-vulndb: GO-2026-6346 GHSA-vhq7-fwwh-7hjf | n/a | 0.0064 | | | [CVE-2026-88045](https://patchblox.com/security/data/cve/CVE-2026-88045.md) | Routine | govulncheck-vulndb: GO-2026-6456 GHSA-2p48-j3qc-rx9f | n/a | 0.0063 | | | [CVE-2026-84304](https://patchblox.com/security/data/cve/CVE-2026-84304.md) | Routine | gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation | 4.4 | 0.0061 | | | [CVE-2026-88007](https://patchblox.com/security/data/cve/CVE-2026-88007.md) | Routine | govulncheck-vulndb: GO-2026-6466 GHSA-qqjf-53cj-pwvv | n/a | 0.0060 | | | [CVE-2026-59157](https://patchblox.com/security/data/cve/CVE-2026-59157.md) | Routine | govulncheck-vulndb: GO-2026-6451 GHSA-v25g-mvwr-f5fp | n/a | 0.0060 | | | [CVE-2026-27779](https://patchblox.com/security/data/cve/CVE-2026-27779.md) | Routine | govulncheck-vulndb: GO-2026-6345 GHSA-v8f2-2ghq-9whv | n/a | 0.0058 | | | [CVE-2026-73293](https://patchblox.com/security/data/cve/CVE-2026-73293.md) | Routine | govulncheck-vulndb: GO-2026-6371 GHSA-cxvf-gvfq-36w2 | n/a | 0.0057 | | | [CVE-2026-79921](https://patchblox.com/security/data/cve/CVE-2026-79921.md) | Routine | golang-github-rabbitmq-amqp091-go: amqp091-go is a Go AMQP 0.9.1 client | n/a | 0.0055 | | | [CVE-2026-71493](https://patchblox.com/security/data/cve/CVE-2026-71493.md) | Routine | govulncheck-vulndb: GO-2026-6439 GHSA-mmg6-4qmv-6pc8 | n/a | 0.0054 | | | [CVE-2026-72810](https://patchblox.com/security/data/cve/CVE-2026-72810.md) | Routine | govulncheck-vulndb: GO-2026-6400 GHSA-mw8r-mw84-88v2 | n/a | 0.0054 | | | [CVE-2026-68584](https://patchblox.com/security/data/cve/CVE-2026-68584.md) | Routine | govulncheck-vulndb: GO-2026-6382 GHSA-7j72-f6wg-cxw6 | n/a | 0.0054 | | | [CVE-2026-11720](https://patchblox.com/security/data/cve/CVE-2026-11720.md) | Routine | govulncheck-vulndb: GO-2026-6411 GHSA-vwxw-jrg6-9jxv | n/a | 0.0053 | | | [CVE-2026-69086](https://patchblox.com/security/data/cve/CVE-2026-69086.md) | Routine | govulncheck-vulndb: GO-2026-6373 GHSA-7hm9-v7vf-7g4w | n/a | 0.0053 | | | [CVE-2026-88012](https://patchblox.com/security/data/cve/CVE-2026-88012.md) | Routine | govulncheck-vulndb: GO-2026-6454 GHSA-7ghq-v6jf-g56c | n/a | 0.0052 | | | [CVE-2026-67445](https://patchblox.com/security/data/cve/CVE-2026-67445.md) | Routine | govulncheck-vulndb: GO-2026-6363 GHSA-w878-pj84-3j5v | n/a | 0.0051 | | | [CVE-2026-67446](https://patchblox.com/security/data/cve/CVE-2026-67446.md) | Routine | govulncheck-vulndb: GO-2026-6359 GHSA-75mr-qw9x-3r39 | n/a | 0.0051 | | | [CVE-2026-71494](https://patchblox.com/security/data/cve/CVE-2026-71494.md) | Routine | govulncheck-vulndb: GO-2026-6437 GHSA-6x6c-w9w9-hv4h | n/a | 0.0050 | | | [CVE-2026-88008](https://patchblox.com/security/data/cve/CVE-2026-88008.md) | Routine | govulncheck-vulndb: GO-2026-6468 GHSA-w4v4-9rw7-5326 | n/a | 0.0049 | | | [CVE-2026-59834](https://patchblox.com/security/data/cve/CVE-2026-59834.md) | Routine | govulncheck-vulndb: GO-2026-6353 GHSA-h89q-4j2h-7h88 | n/a | 0.0048 | | | [CVE-2026-73843](https://patchblox.com/security/data/cve/CVE-2026-73843.md) | Routine | govulncheck-vulndb: GO-2026-6362 GHSA-qh9r-j7rp-4x2m | n/a | 0.0048 | | | [CVE-2026-69083](https://patchblox.com/security/data/cve/CVE-2026-69083.md) | Routine | govulncheck-vulndb: GO-2026-6374 GHSA-fph3-ghq9-vw66 | n/a | 0.0048 | | | [CVE-2026-59832](https://patchblox.com/security/data/cve/CVE-2026-59832.md) | Routine | govulncheck-vulndb: GO-2026-6350 GHSA-275h-v5h9-vr82 | n/a | 0.0047 | | | [CVE-2026-73087](https://patchblox.com/security/data/cve/CVE-2026-73087.md) | Routine | govulncheck-vulndb: GO-2026-6440 GHSA-p2w3-6x73-2f6x | n/a | 0.0047 | | | [CVE-2026-88004](https://patchblox.com/security/data/cve/CVE-2026-88004.md) | Routine | govulncheck-vulndb: GO-2026-6467 GHSA-v67p-phpq-fc8x | n/a | 0.0045 | | | [CVE-2026-27660](https://patchblox.com/security/data/cve/CVE-2026-27660.md) | Routine | govulncheck-vulndb: GO-2026-6347 GHSA-x92v-f5gc-r34v | n/a | 0.0045 | | | [CVE-2026-88009](https://patchblox.com/security/data/cve/CVE-2026-88009.md) | Routine | govulncheck-vulndb: GO-2026-6465 GHSA-f52w-8j3h-j724 | n/a | 0.0044 | | | [CVE-2026-72811](https://patchblox.com/security/data/cve/CVE-2026-72811.md) | Routine | govulncheck-vulndb: GO-2026-6402 GHSA-q2vg-7qgx-x5fc | n/a | 0.0044 | | | [CVE-2026-72798](https://patchblox.com/security/data/cve/CVE-2026-72798.md) | Routine | govulncheck-vulndb: GO-2026-6415 GHSA-mfrj-v65r-979c | n/a | 0.0043 | | | [CVE-2026-72804](https://patchblox.com/security/data/cve/CVE-2026-72804.md) | Routine | govulncheck-vulndb: GO-2026-6407 GHSA-vpjw-wf5h-cgpq | n/a | 0.0043 | | | [CVE-2026-72921](https://patchblox.com/security/data/cve/CVE-2026-72921.md) | Routine | govulncheck-vulndb: GO-2026-6361 GHSA-gv5w-hfx8-8cwq | n/a | 0.0043 | | | [CVE-2026-88011](https://patchblox.com/security/data/cve/CVE-2026-88011.md) | Routine | govulncheck-vulndb: GO-2026-6455 GHSA-rf44-j88r-hh8c | n/a | 0.0042 | | | [CVE-2026-56668](https://patchblox.com/security/data/cve/CVE-2026-56668.md) | Routine | govulncheck-vulndb: GO-2026-6474 GHSA-vrh8-c9cm-wh8v | n/a | 0.0041 | | | [CVE-2026-68586](https://patchblox.com/security/data/cve/CVE-2026-68586.md) | Routine | govulncheck-vulndb: GO-2026-6379 GHSA-36v8-mpjm-8j5r | n/a | 0.0041 | | | [CVE-2026-65959](https://patchblox.com/security/data/cve/CVE-2026-65959.md) | Routine | Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data | 5.3 | 0.0041 | | | [CVE-2026-61625](https://patchblox.com/security/data/cve/CVE-2026-61625.md) | Routine | govulncheck-vulndb: GO-2026-6366 GHSA-8q3c-rjr9-xxrp | n/a | 0.0041 | | | [CVE-2026-76081](https://patchblox.com/security/data/cve/CVE-2026-76081.md) | Routine | govulncheck-vulndb: GO-2026-6473 GHSA-v859-c572-qh5p | n/a | 0.0040 | | | [CVE-2026-25782](https://patchblox.com/security/data/cve/CVE-2026-25782.md) | Routine | govulncheck-vulndb: GO-2026-6343 GHSA-qm72-8prh-g92x | n/a | 0.0039 | | | [CVE-2026-72806](https://patchblox.com/security/data/cve/CVE-2026-72806.md) | Routine | govulncheck-vulndb: GO-2026-6388 GHSA-6mcf-g667-w3qv | n/a | 0.0038 | | | [CVE-2026-72812](https://patchblox.com/security/data/cve/CVE-2026-72812.md) | Routine | govulncheck-vulndb: GO-2026-6408 GHSA-wgwx-479j-23vq | n/a | 0.0038 | | | [CVE-2026-72789](https://patchblox.com/security/data/cve/CVE-2026-72789.md) | Routine | govulncheck-vulndb: GO-2026-6434 GHSA-v684-q882-jgmq | n/a | 0.0037 | | | [CVE-2026-72796](https://patchblox.com/security/data/cve/CVE-2026-72796.md) | Routine | govulncheck-vulndb: GO-2026-6423 GHSA-fgmr-7w36-9qfq | n/a | 0.0035 | | | [CVE-2026-72808](https://patchblox.com/security/data/cve/CVE-2026-72808.md) | Routine | govulncheck-vulndb: GO-2026-6406 GHSA-v7ph-r5r6-4jcj | n/a | 0.0035 | | | [CVE-2026-73840](https://patchblox.com/security/data/cve/CVE-2026-73840.md) | Routine | govulncheck-vulndb: GO-2026-6360 GHSA-c5f6-2rm9-2w8g | n/a | 0.0035 | | | [CVE-2026-72807](https://patchblox.com/security/data/cve/CVE-2026-72807.md) | Routine | govulncheck-vulndb: GO-2026-6410 GHSA-x67c-8pwr-m8g3 | n/a | 0.0033 | | | [CVE-2026-72790](https://patchblox.com/security/data/cve/CVE-2026-72790.md) | Routine | govulncheck-vulndb: GO-2026-6431 GHSA-74pj-6g7r-j55c | n/a | 0.0033 | | | [CVE-2026-72792](https://patchblox.com/security/data/cve/CVE-2026-72792.md) | Routine | govulncheck-vulndb: GO-2026-6427 GHSA-mp7r-57w4-5qm3 | n/a | 0.0033 | | | [CVE-2026-72794](https://patchblox.com/security/data/cve/CVE-2026-72794.md) | Routine | govulncheck-vulndb: GO-2026-6420 GHSA-34fj-mwm6-fjfg | n/a | 0.0033 | | | [CVE-2026-72799](https://patchblox.com/security/data/cve/CVE-2026-72799.md) | Routine | govulncheck-vulndb: GO-2026-6412 GHSA-5w7r-f4cg-rqq7 | n/a | 0.0033 | | | [CVE-2026-72800](https://patchblox.com/security/data/cve/CVE-2026-72800.md) | Routine | govulncheck-vulndb: GO-2026-6395 GHSA-5fhr-f75j-8wr9 | n/a | 0.0033 | | | [CVE-2026-68587](https://patchblox.com/security/data/cve/CVE-2026-68587.md) | Routine | govulncheck-vulndb: GO-2026-6381 GHSA-69mh-gvh4-8gp7 | n/a | 0.0032 | | | [CVE-2026-59185](https://patchblox.com/security/data/cve/CVE-2026-59185.md) | Routine | govulncheck-vulndb: GO-2026-6448 GHSA-cp3j-m783-3ph5 | n/a | 0.0032 | | | [CVE-2026-84303](https://patchblox.com/security/data/cve/CVE-2026-84303.md) | Routine | gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion | n/a | 0.0031 | | | [CVE-2026-72793](https://patchblox.com/security/data/cve/CVE-2026-72793.md) | Routine | govulncheck-vulndb: GO-2026-6424 GHSA-h4v5-crx2-3cv4 | n/a | 0.0031 | | | [CVE-2026-72795](https://patchblox.com/security/data/cve/CVE-2026-72795.md) | Routine | govulncheck-vulndb: GO-2026-6425 GHSA-h6w7-xxcf-w2mq | n/a | 0.0031 | | | [CVE-2026-72801](https://patchblox.com/security/data/cve/CVE-2026-72801.md) | Routine | govulncheck-vulndb: GO-2026-6392 GHSA-8x84-r2ff-h8pq | n/a | 0.0031 | | | [CVE-2026-72809](https://patchblox.com/security/data/cve/CVE-2026-72809.md) | Routine | govulncheck-vulndb: GO-2026-6386 GHSA-3mp7-4rh5-jrv9 | n/a | 0.0030 | | | [CVE-2026-72797](https://patchblox.com/security/data/cve/CVE-2026-72797.md) | Routine | govulncheck-vulndb: GO-2026-6414 GHSA-f2rw-w22v-54vh | n/a | 0.0030 | | | [CVE-2026-72802](https://patchblox.com/security/data/cve/CVE-2026-72802.md) | Routine | govulncheck-vulndb: GO-2026-6398 GHSA-jv8v-xq2h-657v | n/a | 0.0030 | | | [CVE-2026-72803](https://patchblox.com/security/data/cve/CVE-2026-72803.md) | Routine | govulncheck-vulndb: GO-2026-6404 GHSA-qvq9-hq6p-v378 | n/a | 0.0030 | | | [CVE-2026-72805](https://patchblox.com/security/data/cve/CVE-2026-72805.md) | Routine | govulncheck-vulndb: GO-2026-6387 GHSA-67x2-mq63-v9vm | n/a | 0.0030 | | | [CVE-2026-56666](https://patchblox.com/security/data/cve/CVE-2026-56666.md) | Routine | govulncheck-vulndb: GO-2026-6470 GHSA-992q-9gwp-7r79 | n/a | 0.0029 | | | [CVE-2026-73842](https://patchblox.com/security/data/cve/CVE-2026-73842.md) | Routine | govulncheck-vulndb: GO-2026-6428 GHSA-rh53-xvx2-j327 | n/a | 0.0027 | | | [CVE-2026-56665](https://patchblox.com/security/data/cve/CVE-2026-56665.md) | Routine | govulncheck-vulndb: GO-2026-6469 GHSA-v77h-2w3m-94hx | n/a | 0.0027 | | | [CVE-2026-56743](https://patchblox.com/security/data/cve/CVE-2026-56743.md) | Routine | govulncheck-vulndb: GO-2026-6367 GHSA-fm8w-2m5w-9j7r | n/a | 0.0025 | | | [CVE-2026-68585](https://patchblox.com/security/data/cve/CVE-2026-68585.md) | Routine | govulncheck-vulndb: GO-2026-6384 GHSA-pm3w-vxp9-ccwc | n/a | 0.0024 | | | [CVE-2026-73292](https://patchblox.com/security/data/cve/CVE-2026-73292.md) | Routine | govulncheck-vulndb: GO-2026-6370 GHSA-8cj9-r88m-8945 | n/a | 0.0023 | | | [CVE-2026-53495](https://patchblox.com/security/data/cve/CVE-2026-53495.md) | Routine | containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service | n/a | 0.0016 | | | [CVE-2026-59172](https://patchblox.com/security/data/cve/CVE-2026-59172.md) | Routine | govulncheck-vulndb: GO-2026-6450 GHSA-m835-3cm9-rggg | n/a | 0.0016 | | | [CVE-2025-24978](https://patchblox.com/security/data/cve/CVE-2025-24978.md) | Routine | govulncheck-vulndb: GO-2026-6446 GHSA-g8rh-fjm6-h2h9 | n/a | n/a | | | [CVE-2025-24979](https://patchblox.com/security/data/cve/CVE-2025-24979.md) | Routine | govulncheck-vulndb: GO-2026-6447 GHSA-pqqc-8v73-9gg2 | n/a | n/a | | | [CVE-2025-58363](https://patchblox.com/security/data/cve/CVE-2025-58363.md) | Routine | govulncheck-vulndb: GO-2026-6445 GHSA-c23q-fw86-9h5x | n/a | n/a | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.