Oracle Linux 10 : glibc (ELSA-2026-50078)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50078 advisory. - CVE-2026-0915: Stack memory disclosure in getnetbyaddr RHEL-141848 - CVE-2026-0861: Check for alignment overflow in memalign functions RHEL-141732...

CVE-2026-25992

creationtimestamp| type| source ---|---|--- 2026-01-28 09:19:08+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-f72r-2h5j-7639 2026-02-10 18:35:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejm3rvh7c24...

vlt Mishandles Path Sanitization for tar

vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...

CVE-2026-24909

vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...

Relative Path Traversal

Overview @vltpkg/tar is an An extremely limited and very fast tar extractor Affected versions of this package are vulnerable to Relative Path Traversal via improper sanitization of file paths during the extraction process. An attacker can overwrite arbitrary files on the filesystem by crafting ta...

EUVD-2026-4860

vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...

CVE-2026-24909

CVE-2026-24909 concerns the vlt project: vulnerable in versions before 1.0.0-rc.10 due to improper path sanitization in tar extraction, enabling path traversal. In practice, a tar archive with crafted file paths could lead to extraction of files outside the target directory, as described in multi...

CVE-2026-24909

vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...

CVE-2026-24909

vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...

PT-2026-5031

vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...

RHEL 10 : kernel (RHSA-2026:1178)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1178 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Service due to...

CVE-2026-0687

creationtimestamp| type| source ---|---|--- 2026-01-24 10:48:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md623pjguk2m...

glib2 security update

An update is available for glib2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GLib provides the core application building blocks for libraries and...

January 24, 2026—KB5078131 (OS Build 17763.8281) Out-of-band

None None...

RockyLinux 10 : kernel (RLSA-2026:0786)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0786 advisory. kernel: libceph: fix potential use-after-free in havemonandosdmap CVE-2025-68285 Tenable has extracted the preceding description block directly from the RockyLin...

AlmaLinux 10 : glib2 (ALSA-2026:0975)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:0975 advisory. glib: Integer overflow in in gescapeuristring CVE-2025-13601 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...

AlmaLinux 10 : golang (ALSA-2026:0922)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:0922 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding descriptio...

binutils security update

An update is available for binutils. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The binutils packages provide a collection of binary utilities for the...

golang security update

An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

RockyLinux 10 : binutils (RLSA-2025:20155)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:20155 advisory. binutils: GNU Binutils ld elflink.c elfgcsweep memory corruption CVE-2025-5244 Tenable has extracted the preceding description block directly from the RockyLinu...