SUSE SLES12: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix2 / etc (SUSE-SU-2026:4201-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4201-1 advisory. - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156:...

RockyLinux 8 : tesseract (RLSA-2026:67832)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67832 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from the...

CVE-2026-90333: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-block check in dmintegrityrwtag treats a stored tag of all 0xf6 bytes DISCARDFILLER as proof a block was discarded and skips HMAC verification...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gvfs (UTSA-2026-109801)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109801 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds...

CVE-2026-92880: Out-of-bounds Write

A weakness has been identified in vgmstream up to r2117. Impacted is the function vadpcmreadcoefsbe of the file src/coding/vadpcmdecoder.c of the component EA SCHl parser. This manipulation of the argument entry/entries causes out-of-bounds write. Remote exploitation of the attack is possible...

PT-2026-95004

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The MidnightBSD Package Manager fails to consistently reject bundle filenames that are empty or contain dots, dot-dot sequences, or slashes within the libmport/fetch.c file. This occurs because the is...

CVE-2026-93190: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosectypec: Reject out-of-bounds PD cap count crostypecregisterpartnerpdos copies the partner PDOs from the EC TYPECSTATUS response into the fixed capsdesc.pdoPDOMAXOBJECTS array. memcpycapsdesc.pdo,...

CVE-2026-92495: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Clear VMMAYWRITE on DBR/toggle page mmap bnxtremmap rejects VMWRITE for the DBRPAGE and TOGGLEPAGE mmap flags, but a read-only mapping can still retain VMMAYWRITE. nd later be upgraded with mprotectPROTWRITE. This ca...

CVE-2026-86861: Time-of-check Time-of-use (TOCTOU) Race Condition

pgAdmin 4's File Manager savefile endpoint, which backs saving from the Query Tool and ERD, validated the requested path with Filemanager.checkaccesspermission and then opened the file for writing with a plain open call. CVE-2026-7819 had previously hardened the separate file upload path by openi...

PT-2026-95020

Name of the Vulnerable Software and Affected Versions Many Notes versions prior to 0.16.0 Description The ZIP vault import feature in the app/Actions/ProcessImportedVault.php file allows archive filenames to contain parent-directory traversal segments. This enables an authenticated user to write...

CVE-2026-89038: Improper Limitation of a Pathname to a Restricted Directory

Verizon Cloud for Android com.vcast.mediamanager before 26.7.10 contains a path traversal vulnerability that allows co-resident malicious applications to write attacker-controlled bytes outside the intended staging directory by supplying a crafted displayname value containing path-traversal...

PT-2026-94574

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfc llcp getsockopt function where the kernel always stores 4 bytes when using put user, regardless of the optlen provided by the caller. Because the existing leng...

PT-2026-94663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Legacy I/O and memory sysfs handlers fail to verify security locked downLOCKDOWN PCI ACCESS, leaving legacy io and legacy mem files unprotected during kernel lockdown. This allows a root...

CVE-2026-93053: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: speakup: keyhelp: guard letteroffsets possible out-of-range indexing helpinit builds letteroffsets by using the first byte of each function name as an index via start & 31 - 1. If functionnames are overridden from sysfs root with...

RockyLinux 9 : tesseract (RLSA-2026:67831)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67831 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from the...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:68644)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68644 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

SUSE SLES12: gvfs / gvfs-backend-samba / gvfs-backends / gvfs-devel / gvfs-fuse / etc (SUSE-SU-2026:4200-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4200-1 advisory. - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:68645)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68645 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

AlmaLinux 10 : libevent (ALSA-2026:67909)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67909 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...

Libheif 1.22.x < 1.23.2 Heap Buffer Overflow (macOS)

According to its self-reported version, libheif on the remote host is 1.22.0 or later and prior to 1.23.2. It is, therefore, affected by a heap buffer overflow vulnerability. A crafted HEIC/HEIF/AVIF file using nested identity derivation iden and auxiliary auxl item references causes...