Linux Distros Unpatched Vulnerability : CVE-2026-53798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferre...

Linux Distros Unpatched Vulnerability : CVE-2026-53783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated...

Oracle Linux 9 : python3.9 (ELSA-2026-54268)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54268 advisory. - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-53792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory acces...

RockyLinux 9 : python-idna (RLSA-2026:54484)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:54484 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-70458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entrie...

Linux Distros Unpatched Vulnerability : CVE-2026-70456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory b...

IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 Privilege Escalation (7283489)

The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a privilege escalation vulnerability as referenced in the 7283489 advisory. - IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using...

openSUSE 16 Security Update : gd (openSUSE-SU-2026:21548-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21548-1 advisory. This update for gd fixes the following issue: - CVE-2026-9672: security issue in libgd bsc1273101. Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-53800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to...

Linux Distros Unpatched Vulnerability : CVE-2026-53793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by...

Linux Distros Unpatched Vulnerability : CVE-2026-70462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable...

Linux Distros Unpatched Vulnerability : CVE-2026-70452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution...

CoSA: Context-Aware Severity Assessment Via Context Analysis with Large Language Models

Accurate vulnerability severity assessment is essential for prioritizing remediation, yet manually assessing Common Vulnerability Scoring System CVSS base metrics remains labor-intensive. Existing automated approaches often fail to capture the repository-level evidence required for assessing many...

Oracle Linux 8 : python-idna (ELSA-2026-54290)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-54290 advisory. 2.5-8 - Security fix for CVE-2026-45409 Resolves: RHEL-215650 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Linux Distros Unpatched Vulnerability : CVE-2026-70461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte pa...

MiracleLinux 9 : libtiff-4.4.0-18.el9_8.1 (AXSA:2026-1530:09)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1530:09 advisory. libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-53785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by...

Linux Distros Unpatched Vulnerability : CVE-2026-53791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sendi...

Linux Distros Unpatched Vulnerability : CVE-2022-4993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error...