EulerOS Virtualization 2.13.0 : haveged (EulerOS-SA-2026-3214)

According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...

EulerOS Virtualization 2.13.1 : libssh2 (EulerOS-SA-2026-3181)

According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...

RHEL 9 : ignition (RHSA-2026:59549)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59549 advisory. Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regula...

AlmaLinux 8 : NetworkManager (ALSA-2026:58555)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58555 advisory. NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend CVE-2026-10805 Tenable has extracted the preceding descripti...

Oracle Linux 8 : python3.12 (ELSA-2026-58971)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58971 advisory. 3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227198 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Linux Distros Unpatched Vulnerability : CVE-2026-77635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue wit...

Linux Distros Unpatched Vulnerability : CVE-2026-75509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to version 1.7.3,...

CVE-2026-75465

The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...

EulerOS Virtualization 2.13.0 : sudo (EulerOS-SA-2026-3241)

According to the versions of the sudo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the...

Linux Distros Unpatched Vulnerability : CVE-2026-77337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Versions before 2.11.2, from 3.0.0 through...

TencentOS Server 4: jq (TSSA-2026:0863)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0863 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EulerOS Virtualization 2.13.0 : perl-HTTP-Tiny (EulerOS-SA-2026-3228)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.The...

CVE-2026-53532

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...

PT-2026-82040

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;...

CVE-2026-55059

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

The vulnerability of the ad3552r_hs_write_data_source() function in the drivers/iio/dac/ad3552r-hs.c driver for various types of embedded sensors in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ad3552rhswritedatasource function in the drivers/iio/dac/ad3552r-hs.c driver for various types of built-in sensors in the Linux operating system is related to the issue of data being written outside of the buffer in memory. Exploiting this vulnerability could allow an...

The vulnerability of the DecodeQ931() function in the net/netfilter/nf_conntrack_h323_asn1.c module of the Linux kernel’s netfilter component allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DecodeQ931 function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter component in the Linux operating system is related to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise th...

The vulnerability in the function intel_engines_resetdefault_submission() of the drivers/gpu/drm/i915/gt/intel_engine_cs.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the intelenginesresetdefaultsubmission function in the drivers/gpu/drm/i915/gt/intelenginecs.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, involves a pointer manipulation issue. Exploiting this vulnerability could...

PT-2026-81852

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp download of the file src/transcribe anything/ytldp download.py of the component Yt-dlp Download. This manipulation of the argument url causes os command injection. The attack may be initiated remotely...

PT-2026-81489

Name of the Vulnerable Software and Affected Versions Amazon Strands Agents Tools versions prior to 0.8.5 Description Improper neutralization of input used for Large Language Model LLM prompting in the python repl tool allows remote actors to execute arbitrary Python code on the agent's host. Thi...