Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-XML-LibXML (UTSA-2026-150504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150504 advisory. XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freeipmi (UTSA-2026-150473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150473 advisory. ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcipv6info in ipmi-oem/ipmi-oem-dell.c cmc-ipv6-info subcommand to dell...

Linux Distros Unpatched Vulnerability : CVE-2026-121373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2026-48761, sanitizes the refresh URL of content attributes of meta tag...

Oracle Linux 10 : kernel (ELSA-2026-95367)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95367 advisory. - sunrpc: wait for in-flight TLS handshake callback when cancel loses race Olga Kornievskaia RHEL-283649 CVE-2026-72221 - sunrpc: pin svcxprt across...

Elasticsearch 1.x / 3.x < 3.8.6 / 4.0.x < 4.2.1 (ESA-2026-215)

The version of Elasticsearch installed on the remote host is 1.x prior to 3.8.6, or 4.0.x prior to 4.2.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-215 advisory. - Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise ECE...

FreeBSD : openvox -- Flawed Hostname Check allows Puppet Client Impersonation (6cd47e21-d8db-11f1-8d43-18cf5efc6bb4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6cd47e21-d8db-11f1-8d43-18cf5efc6bb4 advisory. The OpenVoxProject reports: Trapperkeeper is the framework we use for running our Clojure based...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:5092-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5092-1 advisory. - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to ...

Linux Distros Unpatched Vulnerability : CVE-2026-110944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server. CVE-2026-110944 Note that Nessus relies on the...

Debian dla-4882 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4882 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4882-1 [email protected]...

Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_93925)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693925 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 bind: BIND: Denial of Service via unbounded processing of crafted DNS...

Linux Distros Unpatched Vulnerability : CVE-2026-122054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may...

Linux Distros Unpatched Vulnerability : CVE-2026-121548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute commands via crafted filenames. Attacke...

AlmaLinux 9 : dpdk (ALSA-2026:94629)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:94629 advisory. dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup CVE-2026-86561 dpdk: dpdk: Control-queue descriptor double-fetch...

MiracleLinux 9 : dpdk-25.11-2.el9_8 (AXSA:2026-2256:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2256:03 advisory. dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup CVE-2026-86561 dpdk: dpdk: Control-queue descriptor double-fetch...

MiracleLinux 8 : qt5-qtbase-5.15.3-10.el8_10 (AXSA:2026-2250:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2250:04 advisory. qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization CVE-2026-11573 qt5-qtbase: qt6-qtbase: Qt:...

CVE-2026-18159: OpenText OpenText Directory Services (OTDS): A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking

A vulnerability in OpenText OpenText Directory Services OTDS on Windows and Linux allows Clickjacking. This issue affects OpenText Directory Services OTDS: from 10.5 through 26.2...

Rocky Linux 10.2 [CIQ] Security Update: virtio-win (crlba-2026_43594)

The Rocky Linux 10.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-202643594 advisory. The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware...

Unity Linux 20.1060a Security Update: dtkcore (UTSA-2026-150514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150514 advisory. libdtkcore/dconfig appid=.. :isValidAppid .. + cleanPath per-uid + savesubpath ,; Tenable has extracted the preceding description block directly from the Unity Linux...

AlmaLinux 8 : gimp:2.8 (ALSA-2026:95482)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:95482 advisory. gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader loadresource1033 CVE-2026-112257 Bug Fixes and Enhancements: gimp: xpm poc file for CVE-2026-415...

CVE-2026-116572: signalwire freeswitch: FreeSWITCH is an open-source software telecommunications platform

FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 to 1.11.1, there is a stack-based buffer overflow in modsofia when processing SIP Contact display names for dialog-event notifications. A peer can establish a dialog containing an excessively long display name and...