Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: samba (UTSA-2026-100783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100783 advisory. Unity Link Advisory UTSA-2026-100783 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Fedora 43 : freeipa / samba (2026-8e7fa96cf3)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-8e7fa96cf3 advisory. Update to Samba 4.23.10 and rebuild of FreeIPA. Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and...

Fedora 44 : freeipa / samba (2026-fcd4630c0d)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-fcd4630c0d advisory. Update to Samba 4.24.5 and rebuild of FreeIPA Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and...

Fedora 45 : freeipa / samba (2026-3be8175017)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-3be8175017 advisory. Update to Samba 4.24.5 and rebuild of FreeIPA Security fixes for CVE-2026-6949, CVE-2026-58218, CVE-2026-58221, CVE-2026-58222, CVE-2026-58216 and...

SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2026:3364-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3364-1 advisory. This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS...

SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2026:3365-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3365-1 advisory. This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS...

Linux Distros Unpatched Vulnerability : CVE-2026-6949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in samba's pamwinbind. When mkhomedir is enabled, pamwinbind chowns the target account's home directory without validating the path is not a...

SUSE CVE-2026-6949

unknown...

CVE-2026-6949

creationtimestamp| type| source ---|---|--- 2026-07-28 14:25:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrpmhj66mu27 2026-07-29 12:45:08+00:00| seen| https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba-1...

CVE-2026-6949

TSIG packet with name compression can crash DNS...

DNS signing DoS via TKEY name cache exhaustion

== Summary: An unauthenticated user can repeatedly register names TKEY names, which floods a cache causing legitimate TKEYs to be expunged. This can practically block the use DNS TSIG signing. Description Only authenticated users are supposed to be able to use TKEY DNS records to register shared...

Debian dsa-6401 : ctdb - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6401 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6401-1 [email protected] https://www.debian.org/securit...

AlmaLinux 8 : go-toolset:rhel8 (ALSA-2026:6949)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:6949 advisory. cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive CVE-2025-61731 net/url: Incorrect parsing of IPv6 host literals in net/url...

MINI-WXH4-6949-GHF6

Bulletin has no description...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2026-6949)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-6949 advisory. delve 1.25.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-1 - Update to Delve 1.25.2 Sync from CentOS Stream 9 - Related:...

RHSA-2026:6949 Red Hat Security Advisory: go-toolset:rhel8 security update

Bulletin has no description...

CVE-2025-6949

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to...

CVE-2025-6949

creationtimestamp| type| source ---|---|--- 2025-10-17 09:04:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3ew4ps3g226 2025-10-17 13:34:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115389765944283292 2025-10-24 07:43:11+00:00| seen| https://t.me/icscert/1339...

CVE-2024-6949

A vulnerability classified as problematic was found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected by this vulnerability is an unknown functionality of the file /pages.php?edit=News. The manipulation leads to path traversal. The attack can be launched remotely. The exploi...

Ubuntu: Security Advisory (USN-6949-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...