MiracleLinux 8 : kernel-4.18.0-553.126.1.el8_10 (AXSA:2026-751:40)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-751:40 advisory. kernel: Bluetooth: MGMT: Fix possible UAFs CVE-2025-39981 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-681...

AlmaLinux 8 : .NET 9.0 (ALSA-2026:21294)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:21294 advisory. dotnet: .NET: infinite loop allows an attacker to cause a denial of service CVE-2026-42899 Tenable has extracted the preceding description block directly from the...

axios: Axios: NO_PROXY bypass via crafted URL

A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses within the 127.0.0.0/8 range, excluding 127.0.0.1, the attacker can completely bypass the...

MiracleLinux 8 : freeipmi-1.6.17-1.el8_10 (AXSA:2026-742:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-742:02 advisory. freeipmi: buffer overflows on response messages via ipmi-oem CVE-2026-33554 Tenable has extracted the preceding description block directly from the MiracleLin...

MiracleLinux 8 : libexif-0.6.22-6.el8_10 (AXSA:2026-740:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-740:02 advisory. libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling CVE-2026-40385 libexif: libexif: Denial of...

PT-2026-45892

Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions prior to 4.41 Description An issue exists where providing input prefixed with a UTF-8 Byte Order Mark BOM can lead to a denial of service. When the decode json function processes a 3-byte UTF-8 BOM, it advances the...

CVE-2026-39828 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39828 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-42506 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-42506 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39830 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39830 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-46597 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-46597 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39821 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39821 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39829 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39829 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-25681 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-25681 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-27136 affecting package multus for versions less than 4.0.2-8

CVE-2026-27136 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...

CVE-2026-39821 affecting package multus for versions less than 4.0.2-8

CVE-2026-39821 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...

unbound security update

An update is available for unbound. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The unbound packages provide a validating, recursive, and caching DNS or DNSS...

cockpit security update

An update is available for cockpit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit enables users to administer GNU/Linux servers using a web browser. It...

.NET 8.0 security update

An update is available for dotnet8.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

compat-libtiff3 security update

An update is available for compat-libtiff3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libtiff3 package provides libtiff 3, an older version of libtiff...