MiracleLinux 8 : iperf3-3.5-12.el8_10.1 (AXSA:2026-1717:05)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1717:05 advisory. iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVE-2026-71217 Tenable has...

TencentOS Server 4: perl-DBI (TSSA-2026:0945)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0945 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-80213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its...

TencentOS Server 3: ruby:3.3 (TSSA-2026:0933)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0933 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PostgreSQL 17.x < 17.11 / 18.x < 18.6 GSSAPI Improper Message Integrity Enforcement

The version of PostgreSQL installed on the remote host is 17 prior to 17.11 or 18 prior to 18.6. As such, it is potentially affected by a security bypass vulnerability: - Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.con...

MiracleLinux 8 : attr-2.6.0-1.el8 (AXSA:2026-1710:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1710:02 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:61943)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61943 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...

Linux Distros Unpatched Vulnerability : CVE-2026-83610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...

PT-2026-84264

Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 17.0 through 27.3.4.16 Erlang/OTP versions 28.0 through 28.5.0.5 Erlang/OTP versions 29.0 through 29.0.5 Description Improper handling of case sensitivity in the inets httpd component allows a remote unauthenticated attacke...

PT-2026-84281

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.9.11 until 0.9.12, the requireWellFormed: true element and attribute name checks use the anchored QName exact expression produced by reg in lib/grammar.js, which inherits the multiline...

PT-2026-84288

Cross-Site request forgery CSRF vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...

CVE-2026-52022

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components...

PT-2026-84151

LibreNMS versions configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any authenticated user who views the affected graph type. The issue is fixed in...

PT-2026-84399

An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0. This issue is an instance of CWE-639: Authorization Bypass Through User-Controlled Key and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N 3.5 Low...

PT-2026-84520

Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent versions prior to 0.18.3 Description A flaw in the MCP Tool component allows for uncontrolled memory allocation. This issue occurs within the list tools function located in the tools/mcp tool.py file and can be...

PT-2026-84180

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 155 Description An information disclosure issue exists within the WebExtensions component, which allows for the unauthorized exposure of sensitive data. Recommendations Update to version 155...

PT-2026-84188

Name of the Vulnerable Software and Affected Versions Firefox Focus for Android versions prior to 155 Description An issue exists in Firefox Focus for Android. Recommendations Update to version 155...

PT-2026-84191

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Thunderbird versions prior to 155 Description A denial-of-service issue exists within the PDF Viewer component. Recommendations Update Firefox to version 155. Update Thunderbird to version 155...

CVE-2026-51788

cleverange_auth v0.1.10 , a Django-based Python authentication package, is vulnerable to remote, unauthenticated Denial of Service (CVSS 7.5 High). Two contributing mechanisms are identified: (1) in accounts/models.py , the create_verification signal automatically creates a Verification record an...

PT-2026-84560

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A use after free issue exists in the TabStrip component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...