ROS-20260924-73-0053

The vulnerability of the isertwaitconn function in the drivers/infiniband/ulp/isert/ibisert.c module of the RTRS server and client kernel driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow a remote attacker to compromise the...

CVE-2026-62286: Exposure of Sensitive Information to an Unauthorized Actor

Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's label filter to container lists but not to the container-stat and container-event channels returned by GET /api/events/stream. In a simple-auth deployment usi...

CVE-2026-79762: Use of Hard-coded Cryptographic Key

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, Termix derives the keys that wrap OIDC and WebAuthn users' Data Encryption Keys from committed default strings and the public userId salt in...

Linux Distros Unpatched Vulnerability : CVE-2026-77762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-multiauth-bypass-sgD2HbL4)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. CVE-2026-76446 - A...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124430 advisory. Unity Link Advisory UTSA-2026-124430 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Fedora 46 : patool (2026-d38857d084)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d38857d084 advisory. Automatic update for patool-4.1.0-1.fc46. Changelog Sun Sep 13 2026 Federico Pellegrin - 4.1.0-1 - Bump to 4.1.0 rhbz2421500 and rhbz2508373 Tenable has...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libkcapi (UTSA-2026-124529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124529 advisory. A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle...

Fedora 44 : patool (2026-23dc582dae)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-23dc582dae advisory. Bump to 4.1.0 rhbz2421500 and rhbz2508373 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124431 advisory. Unity Link Advisory UTSA-2026-124431 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libgit2 vulnerability (USN-8809-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8809-1 advisory. Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using th...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libkcapi (UTSA-2026-124530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124530 advisory. A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block...

Linux Distros Unpatched Vulnerability : CVE-2026-75432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent, and Scanner::PushIndentTo...

Oracle Linux 9 : skopeo (ELSA-2026-70641)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70641 advisory. - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 Tenable has extracted the preceding description block directl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124536 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of- bounds write in buffereventsock.c when...

Kibana Workflows SSRF

The vulnerability of the Workflows interface of the Kibana data visualization service is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Security Component Unauthorized Access

The vulnerability of the Security component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker operating remotely to gain...

LibreNMS XSS

The vulnerability of the LibreNMS network monitoring system is related to deficiencies in the blocking procedures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

OpenTofu DoS

The vulnerability of the OpenTofu infrastructure management tool is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to cause service failures...

PHP dns_get_record SSRF

The vulnerability of the dnsgetrecord function in the PHP programming language is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...