AlmaLinux 8 : librabbitmq (ALSA-2026:75582)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:75582 advisory. rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 Tenable has extracted the preceding description block directly from the...

RockyLinux 10 : libvirt (RLSA-2026:75583)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75583 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buff...

RockyLinux 8 : gd (RLSA-2026:75680)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:75680 advisory. libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 Tenable has extracted the preceding description block directly from the RockyLinu...

SUSE SLES16 Security Update : sccache (SUSE-SU-2026:23983-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23983-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243868. - CVE-2026-25541:...

Linux Distros Unpatched Vulnerability : CVE-2026-98186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WP...

Linux Distros Unpatched Vulnerability : CVE-2026-98272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mvpp2: prevent buffer overflow in pagepool allocation The perprocessor buffering scheme is supported only if the number of pools nrxqs 2 does not exceed...

FreeBSD : rabbitmq-c -- multiple vulnerabilities (03306014-c15d-11f1-acb8-107c611e671e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 03306014-c15d-11f1-acb8-107c611e671e advisory. The rabbitmq-c project reports: CVE-2026-61547: A heap buffer overflow exists when the...

Wireshark 1.8.x < 1.8.12 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.12 advisory. - Multiple buffer overflows in the createntlmsspv2key function in epan/dissectors/packet-ntlmssp.c in t...

AlmaLinux 10 : libvirt (ALSA-2026:75583)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75583 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffe...

RHEL 8 : freerdp (RHSA-2026:76747)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76747 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

ROS-20261006-73-0034

The vulnerability of the KVM kernel component in the Linux operating system is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106709

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3 Description The prezip-bin utility contains a heap-based buffer overflow in the decompressor located in prog/prezip.c. The decompressor fails to properly validate buffer space, allowing a specially crafted...

CVE-2025-71384

Dbit WIFI4 N300 1.0.0 devices allows administrators from the local Wi-Fi network to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,...

ROS-20261006-73-0113

The vulnerability of the parseredbootpartitions function in the drivers/mtd/parsers/redboot.c file of the MTD memory driver in the Linux operating system is related to the copying of buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an...

CVE-2026-98348: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short association responses libipwhandleassocresp reads the capability, status and aid fields of the 30-byte association response prefix and then computes the information element length as stats-len -...

PT-2026-106348

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

PT-2026-106706

Name of the Vulnerable Software and Affected Versions WibuKey driver for Windows versions prior to 6.72 Description Insufficient validation of user input during the calculation of a kernel buffer size allows small amounts of data to be written outside the intended buffer. This out-of-bounds write...

PT-2026-106515

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiex search oui in ie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs,...

Linux Distros Unpatched Vulnerability : CVE-2026-98349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libipw: reject too-short beacon and probe responses libipwprocessproberesponse and the libipwnetworkinit call it makes assume the frame contains the full...

Cisco ASA Improper Input Validation (CVE-2026-20020)

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. If OSPF authentication is enabled, the attacker must know th...