PT-2026-86049

Package cass-config-builder-fips version 1.0.21-r1 fixes 1 vulnerabilities: ghsa-r7wm-3cxj-wff9...

Linux Distros Unpatched Vulnerability : CVE-2026-8798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any...

CVE-2026-6873 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

GHSA-CRHF-3PFG-W68W vulnerabilities

Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips...

CVE-2026-48588 vulnerabilities

Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips...

GHSA-3H9F-R86X-QVJX vulnerabilities

Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips...

GHSA-8QCX-XF44-272X vulnerabilities

Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips...

CVE-2026-53877 vulnerabilities

Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips...

CVE-2026-53878 vulnerabilities

Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1, authentik-fips...

CVE-2026-67214 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, commercial-gitlab-rails-ee, jitsucom-jitsu, langfuse-fips, tensorflow-gpu-jupyter, gitlab-rails-ce-fips, opensearch-dashboards-fips, arangodb, dotstatsuite-supercore, opensearch-dashboards, commercial-gitlab-rails-ee-fips, langfuse,...

GHSA-28WG-GHJ8-5HJV vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, commercial-gitlab-rails-ee, jitsucom-jitsu, langfuse-fips, tensorflow-gpu-jupyter, gitlab-rails-ce-fips, opensearch-dashboards-fips, arangodb, dotstatsuite-supercore, opensearch-dashboards, commercial-gitlab-rails-ee-fips, langfuse,...

Alibaba Cloud Linux 3 : 0246: openssh (ALINUX3-SA-2026:0246)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0246 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55653: A flaw was found in OpenSS...

SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:3528-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3528-1 advisory. Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...

CVE-2026-71847 vulnerabilities

Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, ruby3.3-rails, logstash, cinc-auditor, ruby3.4-rails, logstash-fips, ruby3.2-rails...

GHSA-9HJ4-R449-HFVC vulnerabilities

Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, ruby3.3-rails, logstash, cinc-auditor, ruby3.4-rails, logstash-fips, ruby3.2-rails...

GHSA-98J2-6V39-78W8 vulnerabilities

Vulnerabilities for packages: guacamole-client, wazuh-indexer, apache-pulsar-fips, elasticsearch, opensearch, cassandra-fips, keycloak-fips, bouncycastle-fips...

GHSA-V6W3-QRH8-QCCC vulnerabilities

Vulnerabilities for packages: guacamole-client, wazuh-indexer, opensearch, keycloak-fips, bouncycastle-fips...

CVE-2026-67314 vulnerabilities

Vulnerabilities for packages: kibana, semaphore, langfuse, redisinsight, jitsucom-jitsu, langfuse-fips, wazuh-dashboard, librechat, gitlab-rails-ce-fips, opensearch-dashboards-fips, wazuh-dashboard-fips, prism, opensearch-dashboards, lerna, kubeflow-centraldashboard, gitlab-rails-ce, awx,...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: kibana, semaphore, redisinsight, jitsucom-jitsu, langfuse-fips, wazuh-dashboard, librechat, opensearch-dashboards-fips, wazuh-dashboard-fips, prism, opensearch-dashboards, lerna, langfuse, awx, nextcloud-server, kubeflow-centraldashboard...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop due to the lack of a limit in the retry mechanism for CPU entropy instructions in the native entropy source. An attacker can cause the application to hang indefinitely by triggering persistent failures in the on-chip entro...