RHEL 9 : python-urllib3 (RHSA-2026:60362)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60362 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098890)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098890 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098695 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate ltreedepth to avoid out-of-bounds access The ltreedepth field is 16-bit le16, but...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098935 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation...

AlmaLinux 9 : httpd (ALSA-2026:59347)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59347 advisory. httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 Tenable has...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098744)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098744 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4spomustallow must check this is a v4 compound request If the request being processed i...

Linux Distros Unpatched Vulnerability : CVE-2026-55588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ORAS OCI Registry As Storage is a CLI and library for managing artifacts in OCI registries. In ORAS CLI versions up to and including 1.3.2, the recursive referr...

RHEL 9 : assertj-core (RHSA-2026:60215)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:60215 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104792 advisory. Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098770 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098871 advisory. In the Linux kernel, the following vulnerability has been resolved: schhfsc: Fix qlen accounting bug when using peek in hfscenqueue When enqueuing the first packet t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098755 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before passing...

PT-2026-82314

LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting vulnerability in the user activation confirmation endpoint. The action query parameter is copied into the response and inserted into a hidden input attribute without HTML attribute encoding. This...

PT-2026-82209

Name of the Vulnerable Software and Affected Versions SENAITE.CORE versions 2.0.0 through 2.6.0 Description An unauthenticated remote code execution issue exists in the SENAITE JSON API due to a chain of missing authorization and unsafe evaluation of input. The state-changing routes in...

PT-2026-82226

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the sort parameter in the /ajax table.php API endpoint. This affects address-search.inc.php, alertlog.inc.php,...

PT-2026-82210

Name of the Vulnerable Software and Affected Versions SunEditor versions prior to 3.1.4 Description A DOM-based Cross-Site Scripting XSS issue exists in the SunEditor Embed plugin within src/plugins/modal/embed.js. The plugin uses DOMParser to parse raw embed HTML and processes the resulting DOM...

PT-2026-82108

Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5...

PT-2026-82278

Frappe is a full-stack web application framework written in Python and JavaScript. Prior to version 15.115.0, an access control bypass in the REST API allows a user to read data from Linked DocTypes that they are not authorized to access. When a document references another document through a Link...

PT-2026-81961

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

PT-2026-82102

Name of the Vulnerable Software and Affected Versions Rently Smart Home versions 20.1.0 and earlier Description Insufficiently protected credentials in the API allow an attacker to retrieve pins, including the Master Pin. This issue enables the override of standard user permissions, potentially...