Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kafka (UTSA-2026-150461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150461 advisory. JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150500 advisory. The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control...

RHEL 9 : .NET 9.0 (RHSA-2026:93459)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93459 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150497)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150497 advisory. When using a TarFile.errorlevel = 0and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the...

Linux Distros Unpatched Vulnerability : CVE-2026-106554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tags drives quadratic-time TagList growth CPU/GC-exhaustion DoS,...

RHEL 10 : .NET 10.0 (RHSA-2026:92438)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92438 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly...

Rocky Linux 9.6 [TuxCare] Security Update: cjose / cjose-devel (ALMALINUX9.6:CLSA-2026:1793880785)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793880785 advisory. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE...

Linux Distros Unpatched Vulnerability : CVE-2026-121505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the...

Linux Distros Unpatched Vulnerability : CVE-2026-61497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuhhidparsereportdescriptor in src/class/hid/hidhost....

CVE-2026-54143: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.13, an attacker who can send messages to a configured external channel can cause the agent to create persistent shell cron jobs without human approval. The scheduler later executes...

Linux Distros Unpatched Vulnerability : CVE-2026-121550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main accepts an existing NNNFIFO path...

Linux Distros Unpatched Vulnerability : CVE-2026-119675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-100407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git- credential-wincred store operation in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-150440)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150440 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation...

Linux Distros Unpatched Vulnerability : CVE-2026-63418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, checkicmp stores the number of hosts supplied through -H or...

RHEL 8 : .NET 9.0 (RHSA-2026:92427)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92427 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly...

Linux Distros Unpatched Vulnerability : CVE-2026-115731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: emacs (UTSA-2026-150486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150486 advisory. A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code fro...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150492 advisory. The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kafka (UTSA-2026-150469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150469 advisory. In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not only Kafka Connect API is...