RockyLinux 9 : wireshark (RLSA-2026:83546)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83546 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...

Rocky Linux 10.2 [CIQ] Security Update: hplip / hplip-common / hplip-debuginfo / hplip-debugsource / etc Multiple Vulnerabilities (crlsa-2026_82883)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202682883 advisory. hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple vulnerabilities enabling local code execution and...

nginx 0.9.x < 1.30.4 / 1.31.x < 1.31.3 Heap-based Buffer Overflow

According to its Sever response header, the installed version of nginx is 0.9.x prior to 1.30.4 or 1.31.x prior to 1.31.3. It is, therefore, affected by the following issue : - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string...

RockyLinux 8 : kernel-rt (RLSA-2026:83159)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83159 advisory. kernel: Linux kernel: Denial of Service due to use-after-free in acttunnelkey CVE-2026-68377 kernel: ASoC: SOF: ipc3-control: Fix heap overflow in...

AlmaLinux 8 : wireshark (ALSA-2026:83657)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83657 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...

AlmaLinux 10 : hplip (ALSA-2026:82883)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82883 advisory. hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple vulnerabilities enabling local code execution and...

PT-2026-115919

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...

Linux Distros Unpatched Vulnerability : CVE-2026-89098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify comman...

Linux Distros Unpatched Vulnerability : CVE-2026-111153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by...

MiracleLinux 9 : jackson-core-2.21.6-1.el9_8, jackson-databind-2.21.6-1.el9_8, jackson-jaxrs-providers-2.21.6-1.el9_8, jackson-modules-base-2.21.6-1.el9_8 (AXSA:2026-2065:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2065:01 advisory. com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing...

MiracleLinux 8 : OpenEXR-2.2.0-12.el8_10.3 (AXSA:2026-2069:07)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2069:07 advisory. OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files CVE-2026-59184 OpenEXR: OpenEXR: Heap out-of-bounds write via crafted tile...

PT-2026-115909

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...

RockyLinux 8 : wireshark (RLSA-2026:83657)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83657 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...

CVE-2026-87029

undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...

CVE-2025-66969

A denial of service vulnerability exists in OpenModSim versions

PT-2026-116124

🚨 CVE-2026-89098 A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments t...

UBUNTU-CVE-2026-87029

undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...

PT-2026-115630

Name of the Vulnerable Software and Affected Versions libp2p-rust versions prior to 0.49.5 Description In the official Rust implementation of the libp2p networking stack, the handling of Gossipsub GRAFT control messages allows the addition of attacker-supplied topic hashes to connected peer.topic...

CVE-2026-88753

A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...

Red Hat: CVE-2026-111375: freerdp: FreeRDP: Denial of Service via out-of-bounds read in RAIL window title

FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows malicious RDP servers to trigger heap over-reads by sending non-NUL-terminated window titles. Attackers can send a full-length WINDOWORDERFIELDTITLE update that wfrailwindowcommon...