CVE-2026-75723: Incorrect Authorization

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fontforge (UTSA-2026-090278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090278 advisory. An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an...

AlmaLinux 9 : gstreamer1-plugins-base (ALSA-2026:69100)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:69100 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer: NULL/invalid-point...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2026-091436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091436 advisory. There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData...

RockyLinux 8 : postgresql:15 (RLSA-2026:69923)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69923 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitra...

RHEL 9 : postgresql:15 (RHSA-2026:69914)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69914 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

Adobe Substance 3D Modeler 1.0.0 < 1.22.8 Multiple Arbitrary code execution (APSB26-155)

The version of Adobe Substance 3D Modeler installed on the remote host is prior to 1.22.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-155 advisory. - Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary co...

RHEL 9 : postgresql:15 (RHSA-2026:69698)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69698 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: busybox (UTSA-2026-091364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091364 advisory. Busybox contains a Missing SSL certificate validation vulnerability in The busybox wget applet that can result in arbitrary code execution. This attack appear to be...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-reportlab (UTSA-2023-002178)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002178 advisory. Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. Tenable has extracted the preceding description block directly...

RHEL 8 : postgresql:16 (RHSA-2026:69876)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69876 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

ROS-20260922-73-0020

The vulnerability in gstreamer1-plugins-bad-free is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

RHEL 8 : postgresql:15 (RHSA-2026:69923)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69923 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

APSB26-155 : Security updates available for Substance 3D Modeler

Adobe has released an update for Adobe Substance 3D Modeler. This update addresses critical vulnerabilities that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates...

AlmaLinux 9 : webkit2gtk3 (ALSA-2026:69098)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69098 advisory. chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page CVE-2026-19154 chromium-browser: skia: Skia: Sandbox escape via out-of-boun...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000318 advisory. Git is distributed revision control system. git log can display commits in an arbitrary format using its --format specifiers. This functionality is also exposed to g...

RockyLinux 9 : webkit2gtk3 (RLSA-2026:69098)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69098 advisory. chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page CVE-2026-19154 chromium-browser: skia: Skia: Sandbox escape via...

Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY...

postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead ...

postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module

A flaw was found in PostgreSQL. A type confusion vulnerability in the 'refint' module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server...