Oracle Linux 8 : ELSA-2026-62667-0: / perl-DBI (ELSA-2026-626670)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-626670 advisory. - Fix stack overflow and buffer overflow in DBI.xs CVE-2026-9698 Resolves: RHEL-211160 - Fix heap overflow in SQL preparsing can lead to denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-87825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing...

RockyLinux 10 : opentelemetry-collector (RLSA-2026:65116)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:65116 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service vi...

RHEL 8 : freerdp (RHSA-2026:65855)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65855 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

openSUSE 16: freeciv / freeciv-gtk3 / freeciv-gtk4 / freeciv-lang / freeciv-qt / etc (openSUSE-SU-2026:21800-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21800-1 advisory. Changes in freeciv: - freeciv 3.2.6: Fix Heap Buffer Overflow in worklistload via Crafted Save File boo1278695 Fix Out-of-Bounds Read in activities.orde...

Important: qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including t...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

Elasticsearch 8.x < 8.19.20 / 9.0.x < 9.3.0 DoS (ESA-2026-47)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.20, or 9.0.x prior to 9.3.0. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-47 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial...

RHEL 8 : kernel (RHSA-2026:66000)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66000 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling...

Important: mrtg security update

The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic. Security Fixes: mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID...

ALSA-2026:66016 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang-fip...

RHEL 8 : thunderbird (RHSA-2026:65765)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:65765 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the Graphics:...

AlmaLinux 8 : microcode_ctl (ALSA-2026:65147)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:65147 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

RockyLinux 10 : git-lfs (RLSA-2026:64788)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64788 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial ...

Kibana 8.x < 8.19.17 / 9.0.x < 9.3.0 DoS (ESA-2026-31)

The version of Kibana installed on the remote host is 8.x prior to 8.19.17, or 9.0.x prior to 9.3.0. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-31 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...

The vulnerability of the cypress_read_int_callback() function in the drivers/usb/serial/cypress_m8.c file of the Linux operating system’s USB device driver framework allows a hacker to cause a service failure.

The vulnerability of the cypressreadintcallback function in the drivers/usb/serial/cypressm8.c file of the Linux device driver for USB devices is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failu...

The vulnerability of the svdm_consume_modes() function in the drivers/usb/typec/tcpm/tcpm.c file of the driver for USB TypeC port controllers in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the svdmconsumemodes function in the drivers/usb/typec/tcpm/tcpm.c module of the USB TypeC port controller driver in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker...

The vulnerability of the ipv4_sysctl_exit_net() function in the net/ipv4/sysctl_net_ipv4.c module of the IPv4 protocol implementation in Linux’s operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipv4sysctlexitnet function in the net/ipv4/sysctlnetipv4.c module of the IPv4 protocol implementation in Linux’s kernel relates to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the chap_server_compute_hash() function in the drivers/target/iscsi/iscsi_target_auth.c module of the Linux operating system’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the chapservercomputehash function in the drivers/target/iscsi/iscsitargetauth.c module of the Linux kernel’s TCM driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the cypress_generic_port_probe() function in the drivers/usb/serial/cypress_m8.c driver for USB device controllers in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cypressgenericportprobe function in the drivers/usb/serial/cypressm8.c driver for Linux USB device drivers is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...