RHEL 10 : kernel (RHSA-2026:47017)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47017 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: use a stable FD...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:47071)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47071 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:47050)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47050 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...

RHEL 8 : nodejs:24 (RHSA-2026:47060)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47060 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

RHEL 9 : freerdp (RHSA-2026:47048)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47048 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

RHEL 10 : gstreamer1-plugins-good (RHSA-2026:47032)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47032 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...

Linux Distros Unpatched Vulnerability : CVE-2026-42792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang...

CentOS 9 : kernel-5.14.0-729.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the kernel-5.14.0-729.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use kernelread for sleepable context Prevent a BUG: unable to...

CentOS 9 : opencryptoki-3.27.0-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the opencryptoki-3.27.0-1.el9 build changelog. - openCryptoki is a PKCS11 library and provides tooling for Linux and AIX. In versions 3.26.0 and below, the BER/DER decoding functions in the...

RHEL 9 : freerdp (RHSA-2026:47049)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47049 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

RHEL 8 : resource-agents (RHSA-2026:47091)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47091 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...

RHEL 10 : httpd (RHSA-2026:47046)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47046 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix...

Malicious Package

Overview bigops-operator-status is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for remediation below. Vulnerability...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, camunda-zeebe, spark, opensearch, spark-fips, strimzi-kafka-operator-fips, apache-hop-fips, opensearch-fips, camunda, apache-hop...

GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, camunda-zeebe, spark, opensearch, spark-fips, strimzi-kafka-operator-fips, apache-hop-fips, opensearch-fips, camunda, apache-hop...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: elasticsearch, infinispan, request-9047-keycloak-fips, keycloak, akhq, apache-hop-fips, s3proxy, hono, apicurio-registry, airbyte-server, traccar, keycloak-fips, tez, spark-fips, strimzi-kafka-operator-fips, apache-pulsar, kafka-bridge, knative-kafka-broker,...

GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: spark, strimzi-kafka-operator, opensearch...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: spark, strimzi-kafka-operator, opensearch...

CVE-2026-55578 Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, the terminal feature in Pheditor uses an incomplete character blocklist to sanitize user-supplied commands before passing them to shellexec. After the fix for GHSA-9643-6xjp-vx57 which...