Oracle Linux 9 : ELSA-2026-63136-0: / grafana-pcp (ELSA-2026-631360)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-631360 advisory. 5.1.1-17.1 - Rebuild against updated golang - Resolves RHEL-241464 - Resolves RHEL-242181 - Resolves RHEL-241794 - Resolves RHEL-241448 Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-86308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown...

TencentOS Server 4: freerdp (TSSA-2026:0966)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0966 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

The vulnerability in the script/cgi-bin/dropbox.cgi of the CGI Handler component of the D-Link DNS-340L network storage software allows a hacker to execute arbitrary code.

The vulnerability of the /cgi-bin/dropbox.cgi script of the CGI Handler component in the D-Link DNS-340L network storage software is related to the lack of measures taken at the administrative level to ensure data cleanup. Exploiting this vulnerability could allow an attacker operating remotely t...

Linux Distros Unpatched Vulnerability : CVE-2026-80775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Fix race on the initial mm-futex.phash.ref allocation futexhashallocate allocates mm-futex.phash.ref without any locking. Commit d9b05321e21e futex: Move...

Linux Distros Unpatched Vulnerability : CVE-2026-80773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose...

Linux Distros Unpatched Vulnerability : CVE-2026-86469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library...

Linux Distros Unpatched Vulnerability : CVE-2026-80758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables...

Linux Distros Unpatched Vulnerability : CVE-2026-80879

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix circular locking dependency in ocfs2dioendiowrite A circular locking dependency involves INODEALLOCSYSTEMINODE, EXTENTALLOCSYSTEMINODE, and...

Linux Distros Unpatched Vulnerability : CVE-2026-86423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8725-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8725-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Linux Distros Unpatched Vulnerability : CVE-2026-53769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Avo is a framework to create admin panels for Ruby on Rails apps. From version 2.28.0 to before version 3.32.0, Avo's direct attachment upload endpoint lacks...

Linux Distros Unpatched Vulnerability : CVE-2026-79678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval call before the...

Linux Distros Unpatched Vulnerability : CVE-2026-80865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Add missing accessok call to copyusersyms As reported by sashiko we use getuser without prior accessok call on the user space pointer. Adding the missing...

Fedora 44 : chromium (2026-19cbaba275)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-19cbaba275 advisory. Update to 152.0.7977.82 CVE-2026-85046: Type confusion in V8 CVE-2026-85052: Out of bounds read in CrashReporting CVE-2026-85043: Incomplete cleanup...

LOYTEC L-IP BACnet/IP Routers Improper Privilege Management (CVE-2026-12502)

A local attacker who is a member of the 'superadmin' group can reset the password of any LARM user on a LOYTEC L-IP BACnet/IP router, including the 'larmapp' service account, via the 'set-passwd' subcommand of the '/usr/bin/ltsudo' utility. This bypasses the authorization checks that should limit...

Linux Distros Unpatched Vulnerability : CVE-2026-80898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: clear PGprivate2 on copy-to-cache append failure netfspgpriv2copytocache marks the folio with PGprivate2 before netfspgpriv2copyfolio appends it to the...

Oracle Linux 9 : ELSA-2026-62217-0: / libssh (ELSA-2026-622170)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622170 advisory. 0.10.4-19 - Backport CVE patches from 0.11.5 Resolves: RHEL-213033 Resolves: RHEL-213041 Resolves: RHEL-213047 Resolves: RHEL-213081 Resolves:...

LOYTEC L-IP BACnet/IP Routers Improper Authentication (CVE-2026-12504)

The PAM configuration of a LOYTEC L-IP BACnet/IP router uses the 'pamunix.so nullok' option, which permits authentication against any local account that has an empty password field in '/etc/passwd'. A local attacker can leverage an account left without a password to authenticate as uid=0 and obta...

Linux Distros Unpatched Vulnerability : CVE-2026-80813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/...