RHEL 8 : .NET 9.0 (RHSA-2026:92427)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92427 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly...

Linux Distros Unpatched Vulnerability : CVE-2026-106554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tags drives quadratic-time TagList growth CPU/GC-exhaustion DoS,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kafka (UTSA-2026-150461)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150461 advisory. JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150500 advisory. The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control...

Ubuntu 26.04 LTS : Squid vulnerability (USN-8998-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8998-1 advisory. It was discovered that Squid incorrectly handled certain HTTP Transfer- Encoding headers. An attacker could possibly use this issue to perform HTTP request...

CVE-2026-122318: kyverno: Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and…

Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...

CVE-2026-92697: pavel-odintsov fastnetmon: FastNetMon is a high-performance DDoS detector and sensor

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. Although fields longer than 128 bytes are excluded from...

RHEL 9 : .NET 8.0 (RHSA-2026:93457)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93457 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

CVE-2026-123273: ImageMagick: ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because…

ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing...

CVE-2026-123125: sensiolabs symfony: The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip…

The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal addresses are accepted as public, which can lead to Server-Side Request Forgery SSRF in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x...

Linux Distros Unpatched Vulnerability : CVE-2026-121505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the...

openSUSE 16 Security Update : perl-MIME-tools (openSUSE-SU-2026:22226-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22226-1 advisory. Changes in perl-MIME-tools: - updated to 5.522.0 5.522 5.522 VERSION 5.522 RELEASED Many security issues were addressed see the following ten CV...

Linux Distros Unpatched Vulnerability : CVE-2026-121550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main accepts an existing NNNFIFO path...

Linux Distros Unpatched Vulnerability : CVE-2026-120954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when computing the number of elements describ...

Linux Distros Unpatched Vulnerability : CVE-2026-61497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuhhidparsereportdescriptor in src/class/hid/hidhost....

Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_93925)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693925 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 bind: BIND: Denial of Service via unbounded processing of crafted DNS...

Linux Distros Unpatched Vulnerability : CVE-2026-122054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may...

CVE-2026-82413: ntop ntopng: ntopng is a web-based network traffic monitoring application

ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, scripts/lua/rest/v2/add/host/toscan.lua and scripts/lua/rest/v2/exec/host/schedulevulnerabilityscan.lua accept scanports from any authenticated session, including non-administrator users, while deployments with log...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: emacs (UTSA-2026-150486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150486 advisory. A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code fro...

Rocky Linux 9.6 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs (ALMALINUX9.6:CLSA-2026:1793883335)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793883335 advisory. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR...