Fedora 43 : Lmod (2026-c2e8136fc5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c2e8136fc5 advisory. Update to 9.4.2 CVE-2026-85013 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : Lmod (2026-969cb69eb4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-969cb69eb4 advisory. Update to 9.4.2 CVE-2026-85013 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Important: environment-modules

Issue Overview: modulecomgenwordsandfiles fed untrusted text module names read off disk, LOADEDMODULES, MODULEPATH straight into compgen -W, which performs a full unquoted-word expansion on its wordlist -- including command substitution -- as a normal, documented part of its behavior. A module...

DEBIAN-CVE-2026-85013

A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...

CVE-2026-85013

creationtimestamp| type| source ---|---|--- 2026-09-07 05:41:45+00:00| seen| https://bsky.app/profile/envmodules.bsky.social/post/3muvsdeyx622g...

PT-2026-86652

Name of the Vulnerable Software and Affected Versions environment-modules versions 3.2.7 through 5.6.1 Description A local attacker can exploit a flaw by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml...