RHEL 9 : postgresql:16 (RHSA-2026:93460)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93460 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: pgvector: pgvector: Arbitrary code execution via...

RHEL 9 : nginx (RHSA-2026:93467)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93467 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

RHEL 8 : freerdp (RHSA-2026:93538)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93538 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

RHEL 10 : perl-HTTP-Daemon (RHSA-2026:93585)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93585 advisory. The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 server...

Rocky Linux 8 [CIQ] Security Update: python-pillow-debuginfo / python-pillow-debugsource / etc Multiple Vulnerabilities (crlsa-2026_93077)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693077 advisory. pillow: Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO CVE-2026-112393 pillow: Pillow: Heap buffer overflow in FlashPix FPX JPE...

MiracleLinux 8 : aspell-0.60.6.1-23.el8_10 (AXSA:2026-2230:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2230:01 advisory. aspell: aspell: Arbitrary code execution via crafted dictionary file CVE-2026-103658 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : libXi (ELSA-2026-93439)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93439 advisory. - CVE-2026-109089 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow Resolves: RHEL-293452 Tenable has extracted t...

Oracle Linux 10 : libXi (ELSA-2026-93441)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93441 advisory. - CVE-2026-109089 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow Resolves: RHEL-293447 Tenable has extracted...

Grav CMS 1.10.7 Unauthenticated Remote Code Execution

Grav CMS version 1.10.7 and earlier contain an unauthenticated arbitrary YAML write issue in the Admin component that can create a scheduled task and execute arbitrary PHP code. This proof of concept demonstrates remote code execution. https://packetstorm.news/download/238922...

PT-2026-135547

Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench VEW could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This could allow access to...

Important: libXi security update

X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow CVE-2026-109089 For more details about the security issues, including the...

Security Advisory 0202

Security Advisory 0202 PDF Date: November 2, 2026 Revision | Date | Changes ---|---|--- 1.0 | November 2, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-111497 CVSSv3.1 Base Score: 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSSv4.0 Base Score: 9.2...

Apache OpenOffice Code Execution

The vulnerability in the Apache OpenOffice office suite package is related to the use of an untrusted search path. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

LibreOffice Code Execution

The vulnerability in the LibreOffice office suite package is related to the inclusion of functions from an untrusted controlled area. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...

NGINX Plus/Open Source Module Code Execution

The vulnerability in the ngxhttpcoremodule of NGINX Plus and NGINX Open Source web servers is related to a heap-based buffer overflow. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service by sending a specially crafted HTTP request...

NGINX Plus/Open Source Code Execution

The vulnerability in the ngxhttpcoremodule of NGINX Plus and NGINX Open Source web servers is related to use-after-free memory allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service or execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability in the Views component of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code via a specially crafted HTML page...

Google Chrome Microsoft Edge Code Execution

The vulnerability in the Compositing component of Google Chrome and Microsoft Edge is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code via a specially crafted HTML page...

Black Python Code Formatter Code Execution

The vulnerability in the Black Python code formatting tool is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

libXi security update

1.7.10-4 - CVE-2026-109089 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow Resolves: RHEL-293443 1.7.10-3 - CVE-2026-109090 libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply Resolves: RHEL-293385...