Medium: amazon-ecr-credential-helper

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Linux Distros Unpatched Vulnerability : CVE-2026-108276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108276 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Rocky Linux 8 [CIQ] Security Update: brotli / brotli-debuginfo / brotli-debugsource / brotli-devel / etc (crlsa-2026_90501)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202690501 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2026-135)

The version of kernel installed on the remote host is prior to 5.4.302-229.503. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2026-135 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU gra...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1793359087)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793359087 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: remove blockcb from driverlist before freei...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_90365)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202690365 advisory. kernel: udp: Deal with race between UDP socket address change and rehash CVE-2024-57974 kernel: fuse: re-lock request before replacing page cache folio...

SUSE SLES11: kernel-default / kernel-default-base / kernel-ec2 / kernel-ec2-base / etc (SUSE-SU-2026:4933-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4933-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-74587:...

Linux Distros Unpatched Vulnerability : CVE-2026-119130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path- with-query values in wasmtime-wasi-http are paths, so...

Oracle Linux 9 : .NET / 9.0 (ELSA-2026-92429)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92429 advisory. 9.0.123-1.0.1 - Add support for Oracle Linux 9.0.123-1 - Update to .NET SDK 9.0.123 and Runtime 9.0.22 - Resolves: RHEL-291727 Tenable has extracted the...

Amazon Linux 2023 : golang-github-burntsushi-toml-test, golang-github-burntsushi-toml-test-devel (ALAS2023-2026-3363)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3363 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

RHEL 10 : glycin-loaders (RHSA-2026:92573)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:92573 advisory. Sandboxed and extendable image decoding. Security Fixes: librsvg: Use-after-free when XML includes have duplicated entities...

Linux Kernel TCP SYN DoS

The vulnerability in the tcpv4synrecvsock function of the IPv4 protocol implementation within the Linux kernel is related to memory usage after it has been freed. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4935-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4935-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793370479)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793370479 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix buffer overflow in debugfs If the user tri...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_91565)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202691565 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel...

Important: Red Hat Security Advisory: .NET 11.0 security, bug fix, and enhancement update

An update for .NET 11.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-80789

A flaw was found in the Linux kernel's nvmet-tcp component. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted command with an oversized data length. This can lead to unbounded kernel memory allocation, causing a denial of service DoS due to resource exhaustion...

CVE-2026-80755

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux subsystem. This vulnerability occurs because the system does not properly check the size of permission values when processing security policies. A specially crafted SELinux policy could cause the kernel to write data outside o...

CVE-2026-80825

A flaw was found in the mt7925 Wi-Fi driver in the Linux kernel. A remote attacker could exploit this by sending specially crafted network frames through a bridged interface to an mt7925u Access Point AP. This improper handling of network packet headroom can lead to a kernel panic, causing a deni...

CVE-2026-99141

A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a local user with access to tracing controls to cause a Denial of Service DoS by triggering a kernel crash. When switching tracers, the kernel leaves trace flags unassigned if the new tracer lacks default flags. I...