CentOS Linux 7.9 [CIQ] Security Update: less / less-debuginfo (ciqsa-2026_0692)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260692 advisory. This advisory aggregates security fixes for the less SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2022-48624. Tenable has extracted the preceding...

Rocky Linux 8.8 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-debugsource / libxml2-devel / etc (ciqsa-2026_0946)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260946 advisory. This advisory aggregates security fixes for the libxml2 SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2022-49043. Tenable has extracted the preceding description...

CentOS Linux 8.5 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS8.5:CLSA-2026:1767700070)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1767700070 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 10.2 [CIQ] Security Update: gnome-remote-desktop / gnome-remote-desktop-debuginfo / etc (crlsa-2026_54512)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202654512 advisory. gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service CVE-2026-18358 Tenable...

AlmaLinux 9.2 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc (ALMALINUX9.2:CLSA-2025:1757946824)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757946824 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8.6 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc (ciqsa-2026_0058)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260058 advisory. This advisory aggregates security fixes for the gstreamer1-plugins-bad-free SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44446. Tenable has extracted the...

Rocky Linux 9.2 [CIQ] Security Update: squashfs-tools Multiple Vulnerabilities (ciqsa-2026_0494)

The Rocky Linux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260494 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2021-41072, CVE-2012-4024, CVE-2012-4025...

Rocky Linux 8.6 [CIQ] Security Update: ca-certificates (ciqsa-2026_0015)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260015 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the preceding...

AlmaLinux 9.6 [TuxCare] Security Update: lasso / lasso-devel / perl-lasso / python3-lasso (ALMALINUX9.6:CLSA-2026:1787331325)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787331325 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8.6 [CIQ] Security Update: pam / pam-debuginfo / pam-debugsource / pam-devel (ciqsa-2026_0132)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260132 advisory. This advisory aggregates security fixes for the pam SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2025-8941. Tenable has extracted the preceding description block...

CentOS Linux 7.9 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-devel / libxml2-python / etc (ciqsa-2026_0712)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260712 advisory. This advisory aggregates security fixes for the libxml2 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2025-24928. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (crlsa-2026_13672)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613672 advisory. cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves CVE-2026-26007 pyjwt: PyJWT accepts unknown crit header...

CentOS Linux 8.5 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-Devel-Peek / etc (CENTOS8.5:CLSA-2025:1755270847)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1755270847 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1781108520)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781108520 advisory. - Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue affects Apache Tomcat:...

CVE-2026-78577: Missing Authentication for Critical Function

Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an unauthenticated attacker on the same local network can invoke the scan action and retrieve nearby wireless access-point metadata, including SSIDs, BSSIDs,...

PT-2026-103678

Name of the Vulnerable Software and Affected Versions Genian SSL PNS affected versions not specified Description A missing authorization issue in the public-facing VPN/ZTNA gateway allows an attacker to bypass multi-factor authentication MFA by manipulating a login request parameter. This could...

PT-2026-103920

Name of the Vulnerable Software and Affected Versions WatchGuard endpoint security products affected versions not specified Description A missing authentication issue in the Kernel Memory Access Driver PSKMAD allows a local, authenticated attacker to bypass the access-control handshake. This...

PT-2026-103748

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.19422 Description Missing authorization allows authenticated users to add themselves to project teams, which enables them to access restricted issues. Recommendations Update to version 2026.2.19422...

CVE-2026-104058: Missing Authentication for Critical Function

Podgrab contains a missing authentication vulnerability in which the /ws WebSocket route is registered on the root gin engine instead of the BasicAuth-protected router group, allowing unauthenticated network clients to connect even when PASSWORD is configured. Attackers can join the allConnection...

CVE-2026-78578: Missing Authentication for Critical Function

Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent attacker can submit unauthorized wireless configuration parameters, causing the camera to attempt connection to a different network. Successful...