Linux · SUSE Linux Enterprise · Security advisory · September 21, 2026
SUSE-SU-2026:23863-1: govulncheck-vulndb security update
SUSE-SU-2026:23863-1, released September 21, 2026, fixes 91 CVEs in govulncheck-vulndb (version 0.0.20260916T180043-160000.1.1). One of them is being exploited (CVE-2026-60004); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
91
None rated Critical
Exploited
1
CVE-2026-60004
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.2399
97th percentile
Priority of the 91 CVEs
Patch now 1
Urgent 0
High 10
Routine 80
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| govulncheck-vulndb | sles 16.0 | 0.0.20260916T180043-160000.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-60004 | govulncheck-vulndb: GO-2026-6433 GHSA-rcr6-4jqh-j84m | n/a | 0.2399 | KEVExploited |
| High | CVE-2026-84445 | gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers | 7.5 | 0.0064 | None reported |
| High | CVE-2026-73232 | ffuf: ffuf is a fast web fuzzer written in Go | 7.5 | 0.0063 | None reported |
| High | CVE-2026-88018 | govulncheck-vulndb: GO-2026-6462 GHSA-xwwr-4h3p-r22c | n/a | 0.0051 | None reported |
| High | CVE-2026-88044 | govulncheck-vulndb: GO-2026-6460 GHSA-p569-5gjg-9cmj | n/a | 0.0049 | None reported |
| High | CVE-2026-88015 | govulncheck-vulndb: GO-2026-6461 GHSA-p6m2-r3w9-mpxw | n/a | 0.0036 | None reported |
| High | CVE-2026-88046 | govulncheck-vulndb: GO-2026-6457 GHSA-38xv-hf3p-h7mq | n/a | 0.0029 | None reported |
| High | CVE-2026-88017 | govulncheck-vulndb: GO-2026-6458 GHSA-c476-6w5q-jw77 | n/a | 0.0023 | None reported |
| High | CVE-2026-88013 | govulncheck-vulndb: GO-2026-6463 GHSA-486v-q2wf-fp2r | n/a | 0.0019 | None reported |
| High | CVE-2026-88016 | govulncheck-vulndb: GO-2026-6459 GHSA-f8g7-2xjc-7mfh | n/a | 0.0019 | None reported |
| High | CVE-2026-88014 | govulncheck-vulndb: GO-2026-6464 GHSA-66hp-wgxq-6f5q | n/a | 0.0015 | None reported |
| Routine | CVE-2026-69084 | govulncheck-vulndb: GO-2026-6377 GHSA-vh22-h7hf-www7 | n/a | 0.0157 | None reported |
| Routine | CVE-2026-73667 | govulncheck-vulndb: GO-2026-6357 GHSA-2mw5-23gm-pccq | n/a | 0.0086 | None reported |
| Routine | CVE-2026-73841 | govulncheck-vulndb: GO-2026-6358 GHSA-52gf-6rpq-fgmx | n/a | 0.0081 | None reported |
| Routine | CVE-2026-72920 | govulncheck-vulndb: GO-2026-6351 GHSA-2v6v-25fm-p4fg | n/a | 0.0078 | None reported |
| Routine | CVE-2026-75602 | govulncheck-vulndb: GO-2026-6368 GHSA-h6cj-26g5-67fv | n/a | 0.0069 | None reported |
| Routine | CVE-2026-59161 | govulncheck-vulndb: GO-2026-6453 GHSA-q5j5-6p94-4gwc | n/a | 0.0066 | None reported |
| Routine | CVE-2026-59162 | govulncheck-vulndb: GO-2026-6452 GHSA-fx5j-qcqg-grpf | n/a | 0.0066 | None reported |
| Routine | CVE-2026-26292 | govulncheck-vulndb: GO-2026-6344 GHSA-rc56-rj3f-xggf | n/a | 0.0065 | None reported |
| Routine | CVE-2026-73294 | govulncheck-vulndb: GO-2026-6435 GHSA-xp7j-h7jc-4w8p | n/a | 0.0065 | None reported |
| Routine | CVE-2026-27780 | govulncheck-vulndb: GO-2026-6346 GHSA-vhq7-fwwh-7hjf | n/a | 0.0064 | None reported |
| Routine | CVE-2026-88045 | govulncheck-vulndb: GO-2026-6456 GHSA-2p48-j3qc-rx9f | n/a | 0.0063 | None reported |
| Routine | CVE-2026-84304 | gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation | 4.4 | 0.0061 | None reported |
| Routine | CVE-2026-88007 | govulncheck-vulndb: GO-2026-6466 GHSA-qqjf-53cj-pwvv | n/a | 0.0060 | None reported |
| Routine | CVE-2026-59157 | govulncheck-vulndb: GO-2026-6451 GHSA-v25g-mvwr-f5fp | n/a | 0.0060 | None reported |
Showing 1 to 25 of 91
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.