CVE-2017-5618-Screen-4.5.0-Root

Exploit de escalada de privilegios local para GNU Screen 4.5.0 CVE-2017-5618 📌 Resumen Exploit de escalada de privilegios local para GNU Screen 4.5.0 que secuestra la carga de bibliotecas compartidas para obtener acceso root mediante la manipulación de ld.so.preload. 🔧 Detalles técnicos...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107289 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before passing...

Fedora 44 : bluez (2026-d4156b5fc5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4156b5fc5 advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-88053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses,...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

AlmaLinux 10 : vim (ALSA-2026:66336)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66336 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service vi...

RockyLinux 8 : vim (RLSA-2026:66348)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66348 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service vi...

AlmaLinux 9 : vim (ALSA-2026:66366)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66366 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service via...

RockyLinux 10 : vim (RLSA-2026:66336)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66336 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service v...

PT-2026-90462

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as named data. Both are added to tr-hist vars by save hist...

PT-2026-90138

In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc get and of icc get by index In of icc get by index and icc get, if the dynamic allocation for path-name fails via kasprintf, the error handling path directly calls kfreepath to free the pat...

PT-2026-90319

In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass after ptrace with TSYNC Sashiko review pointed out the following issue. If a thread is stopped in syscall trace enter for ptrace, another thread can install a seccomp filter with SECCOMP FILTER FLAG TSYN...

EUVD-2026-76189

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...

Fedora 45 : libevent (2026-0a83f1b852)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0a83f1b852 advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

AlmaLinux 9 : coreutils (ALSA-2026:66403)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66403 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directly fro...

Fedora 45 : cockpit (2026-a002299f28)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a002299f28 advisory. Automatic update for cockpit-367-1.fc45. Changelog for cockpit Thu Aug 27 2026 Packit - 367-1 - Translation updates Tenable has extracted the preceding...

Microsoft Edge (Chromium) < 151.0.4129.107 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.107. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory. - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107282 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported...

Linux Distros Unpatched Vulnerability : CVE-2026-89147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeou...

HP Support Assistant < 9.53.2.0 Potential Escalation of Privilege (HPSBGN04131)

The version of HP Support Assistant installed on the remote Windows host is prior to 9.53.2.0. It is, therefore, affected by a privilege escalation vulnerability as referenced in the HPSBGN04131 advisory: - A potential security vulnerability has been identified in the HP Support Assistant for...