The vulnerability of the usa49wg_indat_callback() function in the drivers/usb/serial/keyspan.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the usa49wgindatcallback function in the drivers/usb/serial/keyspan.c file of the Linux device driver for USB devices is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the garp_pdu_parse_attr() function in the net/802/garp.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the garppduparseattr function in the net/802/garp.c module, which is part of the networking functions in the Linux kernel, relates to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the function amdgpu_gart_table_ram_free() of the drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

The vulnerability of the dw8250_probe() function in the drivers/tty/serial/8250/8250_dw.c file of the console TTY driver for the serial port of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s serial port module is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the ip6_parse_tlv() function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the bond_enslave() function in the drivers/net/bonding/bond_main.c file of the Linux kernel-based network device driver allows a hacker to cause a service failure.

The vulnerability of the bondenslave function in the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sctp_wait_for_connect() function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpwaitforconnect function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to the lack of measures taken to neutralize numerous internal special elements. Exploiting this vulnerability can allow an attacker to...

Oracle Linux 9 : ELSA-2026-64812-0: / expat (ELSA-2026-648120)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648120 advisory. - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Fix CVE-2026-50219 Tenable has extracted the preceding description block...

RHEL 9 : perl-DBI (RHSA-2026:66179)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:66179 advisory. DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: wget (UTSA-2026-106776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106776 advisory. GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c that allows a remote...

Kibana 8.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 Incorrect Authorization (ESA-2026-169)

The version of Kibana installed on the remote host is 8.x prior to 8.19.21, or 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-169 advisory. - Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead...

MiracleLinux 8 : kernel-4.18.0-553.158.1.el8_10 (AXSA:2026-1794:77)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1794:77 advisory. kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode...

RockyLinux 10 : image-builder (RLSA-2026:65534)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65534 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/x509: golang: Go crypto/x509:...

mrtg security update

2.17.7-1.1 - Fix CVE-2026-72694: symlink-following chown in PID file handling Resolves: RHEL-236037...

PT-2026-89210

Public Runtime Config Exposes Ollama API Key to Browser Clients Summary [email protected] unconditionally merges all module options — including api key — into Nuxt's public runtime config runtimeConfig.public.ollama. Nuxt serializes runtimeConfig.public into the SSR HTML response inside a payloa...

Kibana 8.x < 8.19.19 / 9.0.x < 9.3.5 DoS (ESA-2026-48)

The version of Kibana installed on the remote host is 8.x prior to 8.19.19, or 9.0.x prior to 9.3.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-48 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...

Oracle Linux 8 : ELSA-2026-65897-0: / qt5-qtbase (ELSA-2026-658970)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-658970 advisory. 5.15.3-9 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName Resolves: RHEL-247206 Tenable has extracted the preceding description block...

Kibana 8.x < 8.19.18 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 Path Traversal (ESA-2026-158)

The version of Kibana installed on the remote host is 8.x prior to 8.19.18, or 9.0.x prior to 9.3.6, or 9.4.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-158 advisory. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

RockyLinux 10 : buildah (RLSA-2026:64777)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64777 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial ...

Kibana 8.x < 8.19.21 / 9.0.3 < 9.4.6 Missing Authorization (ESA-2026-155)

The version of Kibana installed on the remote host is 8.x prior to 8.19.21, or 9.0.3 prior to 9.4.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-155 advisory. - Missing Authorization CWE-862 in the Kibana Entity Store feature can lead to unauthorized credential...