Rocky Linux 8.6 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc (ciqsa-2026_1751)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261751 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ FIPS 8.6 Compliant. It addresses 1 CVE: CVE-2026-98432. Tenable has extracted the preceding...

MiracleLinux 8 : xorg-x11-server-Xwayland-21.1.3-20.el8_10.5 (AXSA:2026-2260:10)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2260:10 advisory. xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling CVE-2026-93520 Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_93610)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693610 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP messag...

Rocky Linux 10.2 [CIQ] Security Update: virtio-win (crlba-2026_43594)

The Rocky Linux 10.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-202643594 advisory. The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware...

CVE-2026-102927: hedgedoc: HedgeDoc is an open source, real-time collaborative markdown notes application

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.1, the WebSocket permission handler allows a note owner to store strings outside the supported freely, editable, limited, locked, protected, and private permission values. The viewing and editing checks...

Linux Distros Unpatched Vulnerability : CVE-2026-121548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute commands via crafted filenames. Attacke...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-150456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150456 advisory. A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup3x3 of the file libavfilter/vfconvolution.c...

Unity Linux 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150454 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's...

Linux Distros Unpatched Vulnerability : CVE-2026-110944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server. CVE-2026-110944 Note that Nessus relies on the...

Rocky Linux 9.6 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793887401)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793887401 advisory. - SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache...

RHEL 8 : .NET 8.0 (RHSA-2026:92420)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92420 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

AlmaLinux 9.6 [TuxCare] Security Update: cjose / cjose-devel (ALMALINUX9.6:CLSA-2026:1793880785)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793880785 advisory. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decrypti...

Linux Distros Unpatched Vulnerability : CVE-2026-115731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150492 advisory. The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control...

Elasticsearch 2.x / 3.x < 3.8.6 / 4.0.x < 4.2.1 (ESA-2026-216)

The version of Elasticsearch installed on the remote host is 2.6.x prior to 3.8.6, or 4.0.x prior to 4.2.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-216 advisory. - Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise E...

RHEL 10 : .NET 10.0 (RHSA-2026:92438)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92438 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150420)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150420 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return...

Unity Linux 20.1060a Security Update: dtkcore (UTSA-2026-150514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150514 advisory. libdtkcore/dconfig appid=.. :isValidAppid .. + cleanPath per-uid + savesubpath ,; Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-150417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150417 advisory. FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tlsopen of libavformat/tlsmbedtls.c, which skips hostname check...

Unity Linux 20.1060a / 20.1070a Security Update: wireshark (UTSA-2026-150465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150465 advisory. RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the...