PT-2026-97059

Name of the Vulnerable Software and Affected Versions GNU Emacs versions 28.1 through 31.1 Description Opening a file can lead to arbitrary code execution due to an issue where an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This issue occurs with the defau...

CVE-2026-74765

Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. The XS backend keeps the punycode delta, and the digit index derived from it, in a signed int. The accumulation delta += m-n h+1 has no overflow check, so...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000549 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Linux Distros Unpatched Vulnerability : CVE-2026-74765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. The XS backend...

CVE-2026-96269: Inclusion of Functionality from Untrusted Control Sphere

GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it...

CVE-2026-77243: Missing Authorization

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, ENABLEDTOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke...

ALSA-2026:69964 Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification CVE-2025-5278 For more details about the security...

RHEL 8 : coreutils (RHSA-2026:69964)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69964 advisory. The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils...

ROS-20260922-73-0017

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000280 advisory. Buffer Over-read in GitHub repository vim/vim prior to 9.0.0218. Tenable has extracted the preceding description block directly from the Unity Linux security advisor...

CVE-2026-61570: Improper Restriction of XML External Entity Reference

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, MerlinReader creates a DocumentBuilder with default settings while parsing XML from the ZTIMEINTERVALS column of a Merlin project SQLite database, leaving doctype...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000009 advisory. A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-000283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000283 advisory. A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This cou...

ROS-20260922-73-0005

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

RHEL 7 : gstreamer1-plugins-good (RHSA-2026:70264)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:70264 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dovecot (UTSA-2026-090084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090084 advisory. In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read. Tenable has extracted the...

CVE-2026-81883: Out-of-bounds Read

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecode function parser read fixed function-metadata fields immediately after a function-name string without checking the...

ROS-20260922-73-0028

The vulnerability in gstreamer1-plugins-ugly is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2023-001155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001155 advisory. An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5Olayoutdecode located in H5Olayout.c. It allows an attacker to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000573 advisory. Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and...