Mozilla Firefox < 154.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 154.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-74 advisory. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR...

Mozilla Firefox ESR < 115.39

The version of Firefox ESR installed on the remote Windows host is prior to 115.39. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-75 advisory. - Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some ...

PT-2026-77020

Name of the Vulnerable Software and Affected Versions Firefox ESR version 140.13 Firefox ESR version 153.0 Firefox version 153 Thunderbird ESR version 140.13 Thunderbird ESR version 153.0 Thunderbird version 153 Description Internal bugs were identified that exhibit evidence of memory corruption ...

Linux Distros Unpatched Vulnerability : CVE-2026-74316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Handle layout stid in nfsd4droprevokedstid nfsd4droprevokedstid has no SCTYPELAYOUT case, so when a client sends FREESTATEID for an admin-revoked layout...

Linux Distros Unpatched Vulnerability : CVE-2026-72479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: accel: mma8452: handle I2C read errors in mma8452read Currently, If i2csmbusreadi2cblockdata fails but mma8452setruntimepmstate succeeds, mma8452read retur...

Linux Distros Unpatched Vulnerability : CVE-2026-72004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: fix memory leak in ieee80211registerhw If kmemdup fails while copying supported band structures, the error path jumps to failrate. This skips...

Linux Distros Unpatched Vulnerability : CVE-2026-72006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: free mlx5stidxdata on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak o...

Linux Distros Unpatched Vulnerability : CVE-2026-68478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memstick: msblock: reject a card that reports too many blocks msbftlinitialize computes the zone count from the card block count with no bound: msb-zonecount =...

Linux Distros Unpatched Vulnerability : CVE-2026-68461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software nod...

Linux Distros Unpatched Vulnerability : CVE-2026-72386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced A group ref is tied to the pending tileroomwork, so we need to release it if th...

Linux Distros Unpatched Vulnerability : CVE-2026-72229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: clean untagged VLAN on netdev registration failure When an mesh interface is registered, it creates an untagged struct batadvmeshifvlan on top of it...

Linux Distros Unpatched Vulnerability : CVE-2026-72430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actct: fix nfconnlabels leak on two error paths tcfctfillparams calls nfconnlabelsget setting putlabels when TCACTLABELS is present, but two later...

Linux Distros Unpatched Vulnerability : CVE-2026-72212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/memoryhotplug: fix incorrect altmap passing in error path In createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemm...

Fixed in Apache Tomcat 9.0.121

Low: Authenticated WebSocket session survives end of HTTP session CVE-2026-73180 If the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the...

PT-2026-77023

Name of the Vulnerable Software and Affected Versions Firefox ESR version 115.38 Firefox ESR version 140.13 Firefox ESR version 153.0 Firefox version 153 Thunderbird ESR version 140.13 Thunderbird ESR version 153.0 Thunderbird version 153 Description Internal bugs were identified that exhibit...

Linux Distros Unpatched Vulnerability : CVE-2026-74403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: if snpallocfirmwarepages returns NULL under memory pressure, is it safe to pass ...

PT-2026-77213

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAX VALUE and allocate ...

Linux Distros Unpatched Vulnerability : CVE-2026-72408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - geneve: gate GRO hint in genevegrocomplete on gs-grohint genevegroreceive reads the GRO hint through geneveskgrohintoff, which honours it only when the socket...

GLSA-202608-16 : nginx: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-16 nginx: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in nginx. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

Linux Distros Unpatched Vulnerability : CVE-2026-72431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alloctag: fix use-after-free in /proc/allocinfo after module unload allocinfostart only reinitializes the codetag iterator at position 0. For subsequent reads...