RHEL 10 : osbuild-composer (RHSA-2026:65895)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65895 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

Moderate: gzip security update

The gzip packages contain the gzip GNU zip data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fixes: gzip: gzip: Arbitrary file overwrite via insecure...

ALSA-2026:66000 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

RHEL 8 : kernel (RHSA-2026:65710)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65710 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: dm btree remove: fix use afte...

AlmaLinux 8 : thunderbird (ALSA-2026:65160)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:65160 advisory. firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74934 firefox: thunderbird: Privilege escalation in the...

Oracle Linux 8 : ELSA-2026-63014-0: / kernel (ELSA-2026-630140)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-630140 advisory. - net: ipv6: clear suppressed fib6 rule result Jamie Bainbridge RHEL-246806 CVE-2026-74581 - RHEL only: Disable zram writeback support on non-4k page...

Linux Distros Unpatched Vulnerability : CVE-2026-87795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads...

Kibana 8.x < 8.19.18 / 9.x < 9.4.3 Path Traversal (ESA-2026-157)

The version of Kibana installed on the remote host is 8.x prior to 8.19.18, or 9.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-157 advisory. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet...

AlmaLinux 10 : buildah (ALSA-2026:64777)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64777 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial o...

MiracleLinux 9 : grafana-pcp-5.1.1-17.el9_8.1 (AXSA:2026-1792:12)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1792:12 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Deni...

Kibana 8.x < 8.19.18 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 Path Traversal (ESA-2026-158)

The version of Kibana installed on the remote host is 8.x prior to 8.19.18, or 9.0.x prior to 9.3.6, or 9.4.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-158 advisory. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

Kibana 8.x < 8.19.21 / 9.0.3 < 9.4.6 Missing Authorization (ESA-2026-155)

The version of Kibana installed on the remote host is 8.x prior to 8.19.21, or 9.0.3 prior to 9.4.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-155 advisory. - Missing Authorization CWE-862 in the Kibana Entity Store feature can lead to unauthorized credential...

RockyLinux 10 : buildah (RLSA-2026:64777)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64777 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial ...

Oracle Linux 8 : ELSA-2026-65897-0: / qt5-qtbase (ELSA-2026-658970)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-658970 advisory. 5.15.3-9 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName Resolves: RHEL-247206 Tenable has extracted the preceding description block...

Kibana 8.x < 8.19.19 / 9.0.x < 9.3.5 DoS (ESA-2026-48)

The version of Kibana installed on the remote host is 8.x prior to 8.19.19, or 9.0.x prior to 9.3.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-48 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...

The vulnerability of the amdgpu_vce_cs_reloc() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuvcecsreloc function in the drivers/gpu/drm/amd/amdgpu/amdgpuvce.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability...

The vulnerability of the dw8250_probe() function in the drivers/tty/serial/8250/8250_dw.c file of the console TTY driver for the serial port of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s serial port module is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the usbtmc Interrupt() function in the drivers/usb/class/usbtmc.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the usbtmc Interrupt function in the drivers/usb/class/usbtmc.c module of the Linux USB device driver framework is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the iscsithandle_textcmd() function in the drivers/target/iscsi/iscsi_target.c module of the Linux operating system’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iscsithandletextcmd function in the drivers/target/iscsi/iscsitarget.c module of the Linux operating system’s TCM driver is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the amdgpu_hmm_range_get_pages() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c driver for the Direct Rendering Infrastructure (DRI) of AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpuhmmrangegetpages function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c driver for the Direct Rendering Infrastructure DRI of AMD GPUs in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...