CLSA-2026-1786355016 TuxCare security update for ch.qos.logback (1 CVE)

TuxCare rebuilt 6 ch.qos.logback packages to address 1 CVE. Fixed in 1.2.3-tuxcare.1...

CLSA-2026-1786342108 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 4 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.3...

Exploit for CVE-2026-64564

SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking...

PT-2026-69464

Name of the Vulnerable Software and Affected Versions duhow/xiaoai-patch versions prior to commit fb07049 Description An OS command injection flaw allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers. The issue occurs because the /mute and /unmute endpoints in...

Linux Distros Unpatched Vulnerability : CVE-2026-61550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the...

Linux Distros Unpatched Vulnerability : CVE-2026-68207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: unwind v4l2 device registration on probe error If the vpetop resource is missing, vpeprobe returns -ENODEV after v4l2deviceregister has succeede...

Linux Distros Unpatched Vulnerability : CVE-2026-68218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: pci: dm1105: Free allocated workqueue Destroy allocated workqueue in remove callback to free its resources, thus fixing memory leak. CVE-2026-68218 Note...

Photon OS 5.0: Alsa PHSA-2026-5.0-92-0755

An update of the alsa package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0755. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-69465

Name of the Vulnerable Software and Affected Versions duhow/xiaoai-patch versions prior to commit fb07049 Description A server-side request forgery SSRF issue allows a remote attacker to force a Xiaomi smart speaker to perform HTTP requests to arbitrary internal or external URLs. This occurs...

Photon OS 5.0: Vim PHSA-2026-5.0-91-0774

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0774. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Rust PHSA-2023-5.0-91-0177

An update of the rust package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0177. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2025-5.0-92-0462

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0462. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Erlang PHSA-2025-5.0-91-0505

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0505. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Zlib PHSA-2026-5.0-91-0874

An update of the zlib package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2025-5.0-91-0688

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0688. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-72522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode...

Photon OS 5.0: Unbound PHSA-2026-5.0-92-0862

An update of the unbound package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0862. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2024-5.0-91-0405

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0405. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 10 : libarchive (ELSA-2026-52675)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-52675 advisory. - Related: CVE-2026-14164 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-69186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker- controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming...