EUVD-2025-209819

The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the createadvertiser AJAX action in all versions up to, and including, 1.53.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create...

Rocky Linux 9.2 [CIQ] Security Update: PackageKit / PackageKit-command-not-found / PackageKit-glib / etc Multiple Vulnerabilities (ciqsa-2026_1515)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261515 advisory. This advisory aggregates security fixes for the PackageKit SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2026-41651, CVE-2018-1106. Tenable has extracted...

CentOS Linux 7.9 [CIQ] Security Update: ca-certificates (ciqsa-2026_0654)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260654 advisory. This advisory aggregates security fixes for the ca-certificates SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2023-37920. Tenable has extracted the...

CentOS Linux 7.9 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-devel / httpd-manual / httpd-tools / etc (ciqsa-2026_0671)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260671 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2024-38474. Tenable has extracted the preceding...

Rocky Linux 8.8 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel / etc (ciqsa-2026_1034)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261034 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2023-52425. Tenable has extracted the preceding description blo...

Rocky Linux 8.6 [CIQ] Security Update: python3-reportlab / python3-reportlab-debuginfo (ciqsa-2026_0247)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260247 advisory. This advisory aggregates security fixes for the python-reportlab SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2019-19450. Tenable has extracted the preceding...

CentOS Linux 8.4 [TuxCare] Security Update: glibc-headers / glibc-langpack-dsb / glibc-langpack-eu / etc (CENTOS8.4:CLSA-2025:1750416241)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1750416241 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.4 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource (ciqsa-2026_0559)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260559 advisory. This advisory aggregates security fixes for the pgaudit SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding description...

CentOS Linux 8.5 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS8.5:CLSA-2025:1759248934)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1759248934 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 7.9 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-devel / httpd-manual / httpd-tools / etc (ciqsa-2026_0676)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260676 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2024-39573. Tenable has extracted the preceding...

AlmaLinux 9.2 [TuxCare] Security Update: libblockdev / libblockdev-crypto / libblockdev-crypto-devel / etc (ALMALINUX9.2:CLSA-2025:1754340109)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754340109 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 7.9 [CIQ] Security Update: python-setuptools (ciqsa-2026_0732)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260732 advisory. This advisory aggregates security fixes for the python-setuptools SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the...

Rocky Linux 9.6 [TuxCare] Security Update: squid (ALMALINUX9.6:CLSA-2026:1775034352)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775034352 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8 [CIQ] Security Update: python-lxml-debugsource / python3-lxml / python3-lxml-debuginfo (crlsa-2026_67943)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667943 advisory. lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href CVE-2026-49825 Tenable has extracted the preceding description block direct...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc (crlsa-2025_10551)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202510551 advisory. podman: podman missing TLS verification CVE-2025-6032 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Ness...

Rocky Linux 9.4 [CIQ] Security Update: rubygem-psych / rubygem-psych-debuginfo (ciqsa-2026_1291)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261291 advisory. This advisory aggregates security fixes for the ruby SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-49761. Tenable has extracted the preceding description bloc...

CentOS Linux 7.9 [CIQ] Security Update: graphite2 / graphite2-debuginfo / graphite2-devel (ciqsa-2026_0667)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260667 advisory. This advisory aggregates security fixes for the graphite2 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2018-7999. Tenable has extracted the preceding...

CentOS Linux 8 [TuxCare] Security Update: squid (CENTOS-STREAM8:CLSA-2025:1763031041)

The CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1763031041 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...

CentOS Linux 7.9 [CIQ] Security Update: libssh2 / libssh2-debuginfo / libssh2-devel / libssh2-docs (ciqsa-2026_1438)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261438 advisory. This advisory aggregates security fixes for the libssh2 SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2025-15661. Tenable has extracted the preceding...

Rocky Linux 8.8 [CIQ] Security Update: squashfs-tools (ciqsa-2026_0309)

The Rocky Linux 8.8 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260309 advisory. This advisory aggregates security fixes for the squashfs-tools SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2021-41072. Tenable has extracted the preceding...