Linux Distros Unpatched Vulnerability : CVE-2026-68113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/gfx12: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit...

Linux Distros Unpatched Vulnerability : CVE-2026-68421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Don't warn on core-sched forced idle in putprevtaskscx putprevtaskscx warns when a runnable task drops to a lower schedclass without SCXOPSENQLAST, on...

Linux Distros Unpatched Vulnerability : CVE-2026-6791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home...

CVE-2026-72591: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or external hosts by supplying a crafted imageurl value in the PATCH /apis/web/v1/album/id/image endpoint...

CVE-2026-72581: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perform HTTP requests to arbitrary internal or external URLs. The /auth endpoint in api/main.py uses the user-supplied url POST parameter to...

CVE-2026-72580: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directl...

Important Photon OS Security Update - PHSA-2026-5.0-92-0948

Updates of 'samba-client' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-90-0951

Updates of 'curl' packages of Photon OS have been released...

PT-2026-69475

Name of the Vulnerable Software and Affected Versions gabehf/Koito versions prior to 0.3.3 Description A server-side request forgery SSRF issue allows an authenticated user to force the server to perform HTTP requests to arbitrary internal or external hosts. This occurs when a crafted image url...

Linux Distros Unpatched Vulnerability : CVE-2026-69184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer ho...

Photon OS 5.0: Kafka PHSA-2026-5.0-91-0855

An update of the kafka package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Vim PHSA-2024-5.0-91-0212

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0212. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0890

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0890. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Netkit PHSA-2025-5.0-91-0666

An update of the netkit package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0666. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-61551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth i...

Photon OS 5.0: Linux PHSA-2024-5.0-91-0198

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0198. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-68111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/gfx9: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit b71604f8685b0eba07866f4e8dc30f93e19310...

Photon OS 5.0: Glib PHSA-2026-5.0-90-0763

An update of the glib package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0763. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Etcd PHSA-2026-5.0-91-0802

An update of the etcd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2024-5.0-91-0223

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0223. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...