Linux Distros Unpatched Vulnerability : CVE-2026-89787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: check dir entry fits before reading the hash trailer in ext4searchdir For casefolded encrypted directories ext4 stores an 8-byte hash trailer after the na...

Linux Distros Unpatched Vulnerability : CVE-2026-89792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto...

RHEL 8 : gstreamer1-plugins-good (RHSA-2026:70584)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70584 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

PT-2026-97254

Name of the Vulnerable Software and Affected Versions Qt Quick affected versions not specified Description An out-of-bounds read occurs when parsing untrusted SVG path strings within the Context2D.path and PathSvg.path components. An out-of-bounds read is a condition where a program reads data pa...

PT-2026-97227

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor Reader affected versions not specified Description A heap-based out-of-bounds read occurs during the handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding can lead ...

PT-2026-97226

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An out-of-bounds read occurs during the parsing of PDF files due to insufficient validation of image soft-mask data. A malformed soft-mask data attribute can trigger an...

Critical: ipa security, bug fix, and enhancement update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ip...

PT-2026-97229

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds read occurs during the handling of malformed PDF image masks. Inconsistent image metadata can lead to incorrect alpha-channel processing during...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto...

Oracle Linux 8 : coreutils (ELSA-2026-69964)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69964 advisory. 8.30-21.0.1 - clean up empty file if cp is failed Orabug 15973168 - df --local: recognize afs, auristorfs, and smb3 as remote fs 1798030 - fix formatting of...

RockyLinux 8 : coreutils (RLSA-2026:69964)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69964 advisory. coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification CVE-2025-5278 Tenable has extracted the preceding description block directly from t...

RHEL 9 : qt5-qtbase (RHSA-2026:70561)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70561 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...

SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2026:4286-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4286-1 advisory. - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 - CVE-2026-56855:...

PT-2026-97503

Name of the Vulnerable Software and Affected Versions AWX affected versions not specified Description In the CopyAPIView located in awx/awx/api/generics.py, the permission classes is set to IsAuthenticated,, which prevents the Django REST Framework's get object from performing object-level...

PT-2026-105019

alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer an...

NVIDIA Display Driver DoS

The vulnerability of NVIDIA Display Driver and Guest drivers for NVIDIA virtual graphics processors is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

PaperCut MF Web Interface Data Read Modify

The vulnerability in the web-based interface for controlling printing control software in PaperCut MF and PaperCut NG is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain read-only access and modify data...

Intel Media SDK Heap Buffer Overflow Privilege Escalation

The vulnerability of the Intel Media SDK library lies in reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

WebRTC DoS

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

PT-2026-97360

Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.2 Description An integer overflow occurs in src/topology/ctl.c when computing the combined topology element size using 32-bit arithmetic. This flaw allows bounds checks to be bypassed. By providing crafted...