FreeBSD : openvox -- Flawed Hostname Check allows Puppet Client Impersonation (6cd47e21-d8db-11f1-8d43-18cf5efc6bb4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6cd47e21-d8db-11f1-8d43-18cf5efc6bb4 advisory. The OpenVoxProject reports: Trapperkeeper is the framework we use for running our Clojure based...

Rocky Linux 9 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-debuginfo / cockpit-debugsource / etc Multiple Vulnerabilities (crlsa-2026_94533)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202694533 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit: Cockpit: Denial of Service via...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kafka (UTSA-2026-150469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150469 advisory. In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not only Kafka Connect API is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: perl-XML-LibXML (UTSA-2026-150504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150504 advisory. XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending...

Linux Distros Unpatched Vulnerability : CVE-2026-117666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster sslverifyfun allows an adversary in the middle to impersonate a TLS peer vi...

Linux Distros Unpatched Vulnerability : CVE-2026-121625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Gatekeeper gnugk before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP in ProxyChannel.cxx that allows remote RTP peers to read heap memory...

Linux Distros Unpatched Vulnerability : CVE-2026-61495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtpcontainergetstring in...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_93930)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693930 advisory. kernel: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES CVE-2026-63987 kernel: ethtool: cmis: require exact CDB reply length...

Linux Distros Unpatched Vulnerability : CVE-2026-119674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Database Tools mongorestore incorrectly URL-decodes an original collection name read from metadata when the corresponding dump filename has been...

Fedora 44 : ruby-build (2026-62de4e63a0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-62de4e63a0 advisory. Update to 20261023 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Rocky Linux 9.2 [CIQ] Security Update: pmix / pmix-devel / pmix-pmi / pmix-pmi-devel / pmix-tools (ciqsa-2026_1757)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261757 advisory. This advisory aggregates security fixes for the pmix SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2023-41915. Tenable has extracted the preceding description bloc...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150432 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's...

openSUSE 16: libosmocodec-devel / libosmocodec4 / libosmocoding-devel / etc (openSUSE-SU-2026:22220-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22220-1 advisory. Changes in libosmocore: - Update to release 1.14.2 Fix buffer overflows/overreads in bssgprxpaging, parseprocessussreq, osmodecgcr, osmopbit2ubi...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:22228-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22228-1 advisory. Changes in hauler: - update vendor.tar to address: bsc1288460, CVE-2026-116591, github.com/klauspost/compress/zstd: crafted 27 KB two-block zstd frame...

SUSE SLED15 / SLES15 Security Update : guava, j2objc-annotations (SUSE-SU-2026:5061-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5061-1 advisory. This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without...

CVE-2026-107130: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0

Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox 2.20.5.0...

CVE-2026-105607: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox…

Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox 2.20.5.0...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-150426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150426 advisory. FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowedextensions restrictions when openi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freeipmi (UTSA-2026-150473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150473 advisory. ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcipv6info in ipmi-oem/ipmi-oem-dell.c cmc-ipv6-info subcommand to dell...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kafka (UTSA-2026-150458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150458 advisory. Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses information in the DEBU...