SUSE SLES16: go1.24 / go1.24-doc / go1.24-openssl / go1.24-openssl-doc / etc (SUSE-SU-2026:22950-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22950-1 advisory. Changes in go compilers: - Switch from update-alternatives to new method. - Packaging improvements: Revert %ghost /usr/bin/go /usr/bin/gofm...

openSUSE 16: go1.21 / go1.21-race / go1.22 / go1.22-openssl / etc (openSUSE-SU-2026:21447-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21447-1 advisory. Changes in go compilers: - Switch from update-alternatives to new method. - Packaging improvements: Revert %ghost /usr/bin/go /usr/bin/gofmt which...

RHEL 8 : kpatch-patch (RHSA-2026:48016)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:48016 advisory. This is a kernel live patch module that can be loaded by the kpatch command-line utility to modify the code of a running kernel. This patch module i...

RHEL 8 : kpatch-patch (RHSA-2026:47998)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47998 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...

RHEL 9 : kpatch-patch (RHSA-2026:47984)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47984 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...

SUSE SLED15: java-25-openjdk / java-25-openjdk-demo / java-25-openjdk-devel / etc (SUSE-SU-2026:3331-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3331-1 advisory. Update to upstream tag jdk-25.0.4+7 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information...

SUSE SLED15: java-21-openjdk / java-21-openjdk-demo / java-21-openjdk-devel / etc (SUSE-SU-2026:3332-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3332-1 advisory. Update to upstream tag jdk-21.0.12+8 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information...

Security update for nsd (important)

openSUSE Security Update: Security update for nsd Announcement ID: openSUSE-SU-2026:0265-1 Rating: important References: 1269563 1269564 1269565 1269566 Cross-References: CVE-2026-12244 CVE-2026-12245 CVE-2026-12246 CVE-2026-12490 Affected Products: openSUSE Backports SLE-15-SP7 An update that...

PT-2026-65935

Pwn2Own Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability...

Malicious code in @types-beta/sdk (npm)

The npm package @types-beta/sdk is a supply-chain dropper that impersonates the trusted @types DefinitelyTyped namespace to look like a routine type-definition dependency. It bundles a Windows executable vendor/nanocache.exe and launches it as an import-time side effect: dist/index.js calls init ...

PT-2026-65838

Xlight FTP Server before 3.9.5 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the server's current GetTickCount value by sending a USER command with a username ending in the :adm suffix. Attackers can trigger the admin protocol path within the...

Linux Distros Unpatched Vulnerability : CVE-2026-16313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters...

SUSE SLED15 / SLES15 Security Update : apache-sshd (SUSE-SU-2026:3339-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3339-1 advisory. Update to upstream version 2.19.0. Security issues fixed: - CVE-2026-56452: remote users can use SCP to send...

PT-2026-65910

Name of the Vulnerable Software and Affected Versions OliveTin versions 3000.2.0 through 3000.16.0 Description OS command injection is possible because the checkShellArgumentSafety function in service/internal/executor/arguments.go fails to treat regex: custom argument types as unsafe for Shell...

RockyLinux 9 : ruby (RLSA-2026:33512)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:33512 advisory. ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments CVE-2026-42258 net-imap: ruby: Net::IMAP: Information disclosure via...

MiracleLinux 9 : vim-8.2.2637-26.el9_8.6.ML.1 (AXSA:2026-1386:19)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1386:19 advisory. vim: Vim: Command injection allows arbitrary code execution via malicious tag files CVE-2026-41411 Tenable has extracted the preceding description block...

RHEL 9 : kpatch-patch (RHSA-2026:47997)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47997 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...

FreeBSD-SA-26:51.ktimer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:51.ktimer Security Advisory The FreeBSD Project Topic: Kernel stack disclosure via timersettime2 Category: core Module: ktimer Announced: 2026-07-29 Credits:...

FreeBSD-SA-26:53.ktrace

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:53.ktrace Security Advisory The FreeBSD Project Topic: ktrace2 privilege incorrectly validated in jails Category: core Module: ktrace Announced: 2026-07-29...

PT-2026-65834

AMMOS Instrument Toolkit AIT GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands by calling Sessions.create without any credential check. Attackers can exploit the...