Photon OS 5.0: Openssl PHSA-2026-5.0-90-0747

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0747. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-68287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dropmonitor: fix size calculations for 64-bit attributes netdmpacketreportfill and netdmhwpacketreportfill use nlaputu6464bit to append 64-bit attributes...

Photon OS 5.0: Wireshark PHSA-2026-5.0-92-0862

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0862. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 10 : nodejs-nodemon (ELSA-2026-52841)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-52841 advisory. 3.1.14-3 - Fix CVE-2026-69152 - brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Photon OS 5.0: Linux PHSA-2024-5.0-91-0345

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0345. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-69980

Name of the Vulnerable Software and Affected Versions CyberChef versions prior to 11.3.0 Description The pretty-recipe parser in src/core/Utils.mjs can cause client-side CPU exhaustion when processing a malformed recipe= URL fragment containing numerous unmatched quote characters. This occurs whe...

Linux Distros Unpatched Vulnerability : CVE-2026-68301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hsr: fix memory leak on slave unregistration by removing synced VLANs When an HSR master device is brought UP, it auto-adds VLAN 0 via vlanvid0add, which...

Linux Distros Unpatched Vulnerability : CVE-2026-68406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject...

Photon OS 5.0: Linux PHSA-2023-5.0-91-0107

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0107. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-69958

Name of the Vulnerable Software and Affected Versions ml-metadata affected versions not specified Description An outdated statically-linked gRPC stack in ml-metadata is susceptible to HTTP/2 denial of service DoS issues. An attacker with network access to the MLMD pod can send specially crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-68411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211hwsim: clamp virtio RX length before skbput hwsimvirtiorxwork passes the virtqueue used-ring length reported by the device straight to skbput on a...

Linux Distros Unpatched Vulnerability : CVE-2026-68337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject redirect helpers without a bpfnetcontext The bpfredirect helpers and skbdoredirect obtain the per-task bpfredirectinfo via bpfnetctxgetri, which...

Linux Distros Unpatched Vulnerability : CVE-2026-68400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's epmemoffset to calculate the start of the endpoint memory access...

Linux Distros Unpatched Vulnerability : CVE-2026-68349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: carl9170: fix buffer overflow in rxstream failover path The failover continuation in carl9170rxstream copies the full tlen from the second USB transfer...

Linux Distros Unpatched Vulnerability : CVE-2026-68241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/mst: limit DP MST ESI service loop The loop in inteldpcheckmststatus keeps servicing interrupts originating from the sink without bound. Add an upper...

Linux Distros Unpatched Vulnerability : CVE-2026-68160

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads snaptracelen from the wire-format cephmdscaps header and uses it...

Linux Distros Unpatched Vulnerability : CVE-2026-68110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/sdma4.4.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit...

Linux Distros Unpatched Vulnerability : CVE-2026-68198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: fix use-after-free in aggrresetstate The aggrresetstate function uses timerdelete non-synchronous for the aggregation timer before proceeding to...

Photon OS 5.0: Openssl PHSA-2026-5.0-92-0747

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0747. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2025-5.0-92-0462

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0462. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...