AlmaLinux 9.6 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.6:CLSA-2026:1792085312)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792085312 advisory. - A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130368 advisory. Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. Tenable has...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kbd (UTSA-2026-130164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130164 advisory. openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage,...

Linux Distros Unpatched Vulnerability : CVE-2026-67418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130359 advisory. Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-67416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, the optimized AMQP 1.0 servermode parser in...

SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2026:4653-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4653-1 advisory. This update for gimp fixes the following issue: - CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via...

Unity Linux 20.1070e Security Update: perl-Date-Manip (UTSA-2026-130414)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130414 advisory. Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in parsetime. parsetime removes a time...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130388)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130388 advisory. Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, fr...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130386)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130386 advisory. Uncontrolled Resource Consumption vulnerability in Apache Tomcatvia an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apach...

RHEL 10 : cjose (RHSA-2026:83224)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83224 advisory. CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: OpenIDC/cjose uses all-zero Content...

RHEL 9 : ruby (RHSA-2026:83572)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83572 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management task...

RHEL 7 : firefox (RHSA-2026:83496)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:83496 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130373)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130373 advisory. Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-98390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/amdnode: Avoid divide by zero on virtualized systems On a virtualized system, the number...

Unity Linux 20.1070e Security Update: glibc (UTSA-2026-130371)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130371 advisory. Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result ...

CVE-2026-78850

Matomo v.5.11.2 is vulnerable to a Blind Server-Side Request Forgery (SSRF) (CWE-918) in the SiteContentDetector / SitesManager component. The issue arises because the application allows an authenticated site administrator to configure a main_url that points to an internal address. The system per...

EUVD-2026-102185

An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component...

CVE-2026-63430: Improper Neutralization of Input During Web Page Generation

ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding attribute can permit mutation cross-site scripting. ammonia...

CVE-2026-78850: Server-Side Request Forgery (SSRF)

An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component...