CVE-2026-18515: Improper Limitation of a Pathname to a Restricted Directory

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they should be blocked by Navigator configuration. This could allow attackers to upload files onto the system to places the Navigator support did not intend, but...

PT-2026-91722

Name of the Vulnerable Software and Affected Versions IBM i Access Family versions 1.1.2.0 through 1.1.9.15 Description IBM i Access Client Solutions contains an issue where improper validation of user-supplied input in a malicious emulator macro RunProgram action could allow an authenticated use...

PT-2026-91437

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to gain access to sensitive information through session IP binding bypass in Navigator for i...

PT-2026-91160

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboo...

PT-2026-91088

Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. An attacker may execute a REST API without authentication, which could allow the attacker to retrieve I/O values and/or control the output...

PT-2026-91094

Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-18251: Missing Origin Validation in WebSockets

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origin...

Fedora 45 : podman-tui (2026-14e836e595)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-14e836e595 advisory. release v2.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

google-osconfig-agent-20260908.00-2.1 on GA media (moderate)

google-osconfig-agent-20260908.00-2.1 on GA media Announcement ID: openSUSE-SU-2026:11751-1 Rating: moderate Cross-References: CVE-2026-56854 CVSS scores: CVE-2026-56854 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-56854 SUSE : 8.6...

SUSE CVE-2026-89644

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all exit paths. For direct writes into a NOCOW range,...

SUSE CVE-2026-89751

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

Linux Distros Unpatched Vulnerability : CVE-2026-89578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and...

Linux Distros Unpatched Vulnerability : CVE-2026-89644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all...

Linux Distros Unpatched Vulnerability : CVE-2026-89751

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0 %NASLMINLEVEL 80900 C...

CVE-2026-89578

A flaw was found in the Linux kernel's device mapper I/O dm-io component. When handling DMIOBIO requests, incorrect sector-based accounting for misaligned direct I/O buffers could lead to an infinite loop. This issue can cause I/O operations to hang indefinitely, resulting in a denial of service...

CVE-2026-89751

A flaw was found in the Linux kernel's x86/tdx component. An off-by-one error in the handlein and handleout functions, specifically in the GENMASK calculation for port I/O operations, causes the mask to be one bit too wide. This incorrect handling of I/O sizes could potentially lead to unintended...

CVE-2026-89644

A flaw was found in the Linux kernel's btrfs filesystem. When performing direct I/O writes in a NOCOW No Copy-On-Write range, an extent map reference may not be properly released if an error occurs during extent creation. This oversight can lead to an extent map leak, potentially causing memory...

AZL-100772 CVE-2026-89751 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

CVE-2026-89751

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

DEBIAN-CVE-2026-89751

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...