EulerOS Virtualization 2.13.1 : sed (EulerOS-SA-2026-3198)

According to the versions of the sed packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When sed is invoked with both -i in-place edit and --follow-symlinks, the function opennextfile performs two separate, non-atomic...

EulerOS Virtualization 2.13.1 : libXpm (EulerOS-SA-2026-3179)

According to the versions of the libXpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in X.org libXpm up to 3.5.4. It has been classified as problematic.CWE is classifying the issue as CWE-12...

EulerOS Virtualization 2.13.1 : python-paramiko (EulerOS-SA-2026-3191)

According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

RockyLinux 10 : python3.12 (RLSA-2026:58902)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58902 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding...

EulerOS Virtualization 2.13.1 : lcms2 (EulerOS-SA-2026-3178)

According to the versions of the lcms2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

EulerOS Virtualization 2.13.0 : libxml2 (EulerOS-SA-2026-3223)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function...

EulerOS Virtualization 2.13.0 : python-paramiko (EulerOS-SA-2026-3231)

According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

EulerOS Virtualization 2.13.0 : libsolv (EulerOS-SA-2026-3220)

According to the versions of the libsolv packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect...

EulerOS Virtualization 2.13.1 : bzip2 (EulerOS-SA-2026-3167)

According to the versions of the bzip2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an...

EulerOS Virtualization 2.13.0 : rsync (EulerOS-SA-2026-3236)

According to the versions of the rsync packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list...

EulerOS Virtualization 2.13.0 : httpd (EulerOS-SA-2026-3215)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...

...[ More ]

This Metasploit module exploits CVE-2026-66066 in Ruby on Rails Active Storage when the application uses the Vips variant processor and accepts untrusted image uploads. A crafted MATLAB v7.3/HDF5 image uses external storage to read text files accessible to the Rails worker through a PNG...

Who Falls for SMiSh? Learning through Survey Data Where to Best Target Awareness Training for Mobile Messaging Attacks

As mobile phone adoption has surged, so have scams involving these devices. One such scam, known as SMiShing or smishing after Short Message Service SMS, involves fraudsters sending phishing links via mobile texts. Despite the prevalence of SMiShing, there is a lack of data on who is most...

FreeBSD Security Advisory - FreeBSD-SA-26:60.ppp

FreeBSD Security Advisory - ppp8 contained three memory safety errors in its handling of multilink endpoint discriminator options. mpEnddisc used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global...

FreeBSD-SA-26:63.posixshm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:63.posixshm Security Advisory The FreeBSD Project Topic: TOCTOU race in POSIX shared memory large page configuration Category: core Module: posixshm...

RHEL 10 : kpatch-patch-6_12_0-211_16_1 (RHSA-2026:59143)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:59143 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This pat...

Security Notice: NVIDIA Rowhammer - August 2026

NVIDIA has released updated guidance regarding Rowhammer mitigations for NVIDIA GPU and SoC products. NVIDIA recommends a defense-in-depth posture, including enabling SYS-ECC and host IOMMU / DMA isolation. See details below. Go to NVIDIA Product Security. Details NVIDIA received follow-on resear...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2026:59135)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59135 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:59136)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59136 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

Security Advisory 0147

Security Advisory 0147 PDF Date: August 25, 2026 Revision | Date | Changes ---|---|--- 1.0 | August 25, 2026 | Initial release 1.1 | August 31, 2026 | Updated the EOS versions affected and resolved The CVE-IDs tracking these issues: CVE-2026-59995 CVSSv3.1 Base Score: 5.4...