ALSA-2026:59379 Moderate: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 For more details about the...

PT-2026-81537

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in WebProtect allows a remote attacker to leak sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to version 152.0.7977.65 ...

PT-2026-81690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in TabGroups allows a remote attacker to potentially leak sensitive information through crafted network traffic. Recommendations Update Google Chrome to version...

PT-2026-81148

Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet and offsetexists methods that lack field filtering. Attackers with page-edit permissions can call offsetGet on User objects to extract hashed passwords and 2FA secrets, enabling offli...

PT-2026-81665

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Network component of the renderer process. A remote attacker who has already compromised the renderer process can use a crafted HTML page to obtain...

PT-2026-81571

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the Extensions component. A remote attacker can use social engineering to obtain cross-origin data by utilizing a crafted Chrome extension. Cross-origin da...

The vulnerability of the rxgk_verify_authenticator() function in the net/rxrpc/rxgk.c module allows attackers to access protected information or cause service failures under Linux operating system kernels.

The vulnerability of the rxgkverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow a remote attacker to gain access to protected...

The vulnerability of the netfs_read_unlock_folios() function in the fs/netfs/read_collect.c module, which is part of the Linux kernel’s network file system support, allows a attacker to gain access to protected information or cause service interruptions.

The vulnerability of the netfsreadunlockfolios function in the fs/netfs/readcollect.c module, which is part of the Linux kernel’s network file system support, relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to access...

The vulnerability of the conntrack mechanism for monitoring network connections in the netfilter component of the Linux operating system’s kernel allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the conntrack mechanism for monitoring network connections in the netfilter component of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

The vulnerability of the `ibmvfc_discover_targets_done()` function in the `drivers/scsi/ibmvscsi/ibmvfc.c` file of the Linux SCSI device driver module allows a attacker to access protected information or cause a service failure.

The vulnerability of the ibmvfcdiscovertargetsdone function in the drivers/scsi/ibmvscsi/ibmvfc.c file of the Linux SCSI device driver module is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to access protected...

The vulnerability of the decode_int() function in the net/netfilter/nf_conntrack_h323_asn1.c module of the netfilter component in the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the decodeint function in the net/netfilter/nfconntrackh323asn1.c module of the netfilter component in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

The vulnerability of the u32_classify() function in the net/sched/cls_u32.c module of the network scheduling subsystem of the Linux operating system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the u32classify function in the net/sched/clsu32.c module of the network scheduling subsystem of the Linux operating system is related to incorrect checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability may allow an attacker to acces...

AlmaLinux 8 : python-urwid (ALSA-2026:58562)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:58562 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description block...

RHEL 9 : python-urwid (RHSA-2026:58953)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58953 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 8 : python-urwid (RHSA-2026:59198)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:59198 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Linux Distros Unpatched Vulnerability : CVE-2026-78475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the...

MiracleLinux 8 : python-urwid-1.3.1-5.el8_10 (AXSA:2026-1644:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1644:01 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description...

PT-2026-81516

Name of the Vulnerable Software and Affected Versions NVIDIA NemoClaw versions 0.0.0 through 0.0.25 Description NVIDIA NemoClaw for Linux contains a flaw in its inference server setup that allows a remote attacker to access the inference service without authentication. In affected configurations,...

PT-2026-81725

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in Skia, a graphics library used by the browser. A remote attacker who has already compromised the renderer process can potentially obtain sensitive informati...

PT-2026-81622

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak exists in the ServiceWorker, which allows a remote attacker to obtain sensitive information by using a crafted HTML page. A ServiceWorker is a script that the browse...