RockyLinux 10 : firefox (RLSA-2026:89758)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89758 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer...

RockyLinux 10 : .NET 9.0 (RLSA-2026:92430)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:92430 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Bug Fixes and Enhancements: Update .NET 9.0 to S...

RockyLinux 10 : bind (RLSA-2026:92419)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:92419 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP...

RockyLinux 10 : dogtag-pki (RLSA-2026:92408)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:92408 advisory. resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode Decompression-Bomb DoS CVE-2026-89059 resteasy-core: RESTEasy: CorsFilter Reflects...

RockyLinux 10 : pipewire (RLSA-2026:61241)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:61241 advisory. pipewire: RAOP RTSP NULL Deref CVE-2026-14324 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note that...

RockyLinux 10 : .NET 10.0 (RLSA-2026:92438)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:92438 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Bug Fixes and Enhancements: Update .NET 10.0 to...

RockyLinux 10 : .NET 8.0 (RLSA-2026:92428)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:92428 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege...

RockyLinux 10 : ignition (RLSA-2026:91720)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:91720 advisory. crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates CVE-2026-111943 Tenable has extracted the preceding...

RockyLinux 10 : libXi (RLSA-2026:91004)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:91004 advisory. libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser CVE-2026-93543 Tenable has extracted the preceding description block directly from th...

RockyLinux 10 : brotli (RLSA-2026:90449)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:90449 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the RockyLinux security...

RockyLinux 10 : kernel (RLSA-2026:91565)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:91565 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel...

RockyLinux 10 : bind (RLSA-2026:90328)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:90328 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 Tenable has extracted the preceding description block directly from the...

RockyLinux 10 : yggdrasil (RLSA-2026:91138)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:91138 advisory. net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing CVE-2026-94440 net/http:...

RockyLinux 10 : thunderbird (RLSA-2026:90895)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:90895 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 Bug Fixes and Enhancements: Thunderbird ESR 153 rebase rhel-10.2.z JIRA:Rocky Linux-175207...

RockyLinux 10 : oci-seccomp-bpf-hook (RLSA-2026:89752)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89752 advisory. net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 net/http: golang: golang: Denial of Servic...

RockyLinux 10 : grafana (RLSA-2026:89732)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89732 advisory. grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/textproto: mime/multipart: golang: golang: Denial of...

RockyLinux 10 : libreswan (RLSA-2026:89923)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89923 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: Denial of Service via sending bogus X.509 certificates...

RockyLinux 10 : httpd (RLSA-2026:89860)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89860 advisory. httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in modproxyuwsgi CVE-2026-63718 httpd: httpd: Denial of Service via intege...

RockyLinux 10 : flatpak (RLSA-2026:89849)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89849 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary...

RockyLinux 10 : skopeo (RLSA-2026:89761)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89761 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...