ROOT-OS-DEBIAN-11-CVE-2026-34982 CVE-2026-34982 in vim - Patched by Root

Root has patched CVE-2026-34982 in the vim package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-82681

ash-project ash_admin (Elixir admin panel) contains a query-parameter injection in the Table, DataTable, and Show components. Row-action URLs were built via raw string interpolation of the primary key without URL-encoding. Because the primary key is spliced last into the query string and Plug.Con...

Linux Distros Unpatched Vulnerability : CVE-2026-81495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - security update CVE-2026-81495 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

go-toolset:ol8 security, bug fix, and enhancement update

delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev golang 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 - Resolves: RHEL-246426...

Fedora 44 : apache-ivy (2026-c02768c662)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c02768c662 advisory. IMPROVEMENT: ivy:retrieve and the 'post resolve tasks' now support the override child element. IVY-1664 IMPROVEMENT: ivy:makepom will now add override elemen...

Fedora 43 : kernel (2026-f04e0d4d9d)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f04e0d4d9d advisory. The 7.1.12 stable kernel update contains a single fix for CVE-2026-80590. ---- The 7.1.11 stable kernel updates contain a number of important fixes across th...

Linux Distros Unpatched Vulnerability : CVE-2026-81497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - security update CVE-2026-81497 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

OPENSUSE-SU-2026:11650-1 gopass-1.17.0-1.1 on GA media

These are all security issues fixed in the gopass-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : apache-ivy (2026-d0535bed52)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d0535bed52 advisory. IMPROVEMENT: ivy:retrieve and the 'post resolve tasks' now support the override child element. IVY-1664 IMPROVEMENT: ivy:makepom will now add override elemen...

PT-2026-89531

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 2 CVEs. Fixed in 4.0.1-tuxcare.1...

OPENSUSE-SU-2026:11651-1 incus-7.4-1.1 on GA media

These are all security issues fixed in the incus-7.4-1.1 package on the GA media of openSUSE Tumbleweed...

UBUNTU-CVE-2026-82562

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...

Linux Distros Unpatched Vulnerability : CVE-2026-63110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - libvhost-user: fix heap overflow in vucheckqueueinflights CVE-2026-63110 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2026-17516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to an unspecified security flaw within QEMU that was resolved in upstream releases. CVE-2026-17516 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-66022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to an unpatched issue inside Linux distribution source packages. CVE-2026-66022 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-63320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - virtio-net: fix short frame OOB read in receivefilter CVE-2026-63320 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-50624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unity Link Advisory UTSA-2026-124428 CVE-2026-50624 CVE-2026-50624 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEV...

Linux Distros Unpatched Vulnerability : CVE-2026-15264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unity Link Advisory UTSA-2026-124429 CVE-2026-15264 CVE-2026-15264 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEV...

Linux Distros Unpatched Vulnerability : CVE-2026-61406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - hw/uefi: check lower limit for signature list size CVE-2026-61406 Note that Nessus relies on the presence of the packa...

CVE-2026-82562 qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)

Summary When qs.parse is called with comma: true and throwOnLimitExceeded: true, a comma-separated value under a bracket-push key a=1,2,3,4 is split into an array without being compared against arrayLimit, while the same value under a flat key a=1,2,3,4, an indexed key a0=, a nested key ab=, or a...