Rocky Linux 9 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (crlsa-2026_13672)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613672 advisory. cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves CVE-2026-26007 pyjwt: PyJWT accepts unknown crit header...

AlmaLinux 9.2 [TuxCare] Security Update: avahi / avahi-autoipd / avahi-compat-howl / avahi-compat-howl-devel / etc (ALMALINUX9.2:CLSA-2025:1753988282)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1753988282 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.6 [CIQ] Security Update: postfix / postfix-cdb / postfix-cdb-debuginfo / postfix-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1450)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261450 advisory. This advisory aggregates security fixes for the postfix SRPM in CIQ LTS 9.6. It addresses 5 CVEs: CVE-2011-1720, CVE-2008-2937, CVE-2008-3889,...

Rocky Linux 9.2 [CIQ] Security Update: freeradius / freeradius-debuginfo / freeradius-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0415)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260415 advisory. This advisory aggregates security fixes for the freeradius SRPM in CIQ LTS 9.2. It addresses 13 CVEs: CVE-2017-10978, CVE-2017-10983, CVE-2017-10986,...

Rocky Linux 9.2 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0418)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260418 advisory. This advisory aggregates security fixes for the ghostscript SRPM in CIQ LTS 9.2. It addresses 40 CVEs: CVE-2016-7979, CVE-2009-0583, CVE-2017-7975,...

Rocky Linux 8.8 [CIQ] Security Update: python39-pip / python39-pip-wheel (ciqsa-2026_1158)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261158 advisory. This advisory aggregates security fixes for the python3x-pip SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2024-6345. Tenable has extracted the preceding descripti...

Rocky Linux 9.2 [CIQ] Security Update: PackageKit / PackageKit-command-not-found / PackageKit-glib / etc Multiple Vulnerabilities (ciqsa-2026_1515)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261515 advisory. This advisory aggregates security fixes for the PackageKit SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2026-41651, CVE-2018-1106. Tenable has extracted...

Rocky Linux 9.2 [CIQ] Security Update: grafana-pcp / grafana-pcp-debuginfo / grafana-pcp-debugsource (ciqsa-2026_1064)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261064 advisory. This advisory aggregates security fixes for the grafana-pcp SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-1394. Tenable has extracted the preceding descriptio...

ASB-A-513582756

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Rocky Linux 9.6 [CIQ] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static / glib2-tests Multiple Vulnerabilities (ciqsa-2026_1405)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261405 advisory. This advisory aggregates security fixes for the glib2 SRPM in CIQ LTS 9.6. It addresses 6 CVEs: CVE-2023-25180, CVE-2024-34397, CVE-2025-3360,...

Rocky Linux 8.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-debuginfo / nginx-debugsource / etc (ciqsa-2026_0997)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260997 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44487. Tenable has extracted the preceding description blo...

Rocky Linux 9.2 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0444)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260444 advisory. This advisory aggregates security fixes for the libjpeg-turbo SRPM in CIQ LTS 9.2. It addresses 11 CVEs: CVE-2018-20330, CVE-2021-37972, CVE-2018-19664,...

grafana: grafana: Dashboard modification lockout via forged file-provisioning metadata

A flaw was found in Grafana. An authenticated user with Editor permissions can set file-provisioning metadata when creating a dashboard through the dashboard API due to a missing authorization check. Consequently, the dashboard is treated as externally managed by configuration files, preventing...

undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation

A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure a...

CVE-2026-102110

A Kiteworks appliance is vulnerable to a missing authentication flaw in a setup function used during initial activation . An unauthenticated network attacker can repeatedly re-trigger the privileged activation process during this specific window because the endpoint fails to enforce intended stat...

CVE-2026-101879

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

CVE-2026-102124 Kiteworks Core Missing Authentication for Critical Function

A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to the appliance could read and modify a limited set of setup records, including a contact name and email address captured...

CVE-2026-102124 Kiteworks Core Missing Authentication for Critical Function

A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to the appliance could read and modify a limited set of setup records, including a contact name and email address captured...

CVE-2026-102124

The Kiteworks appliance setup interface fails to enforce authentication after the initial configuration is complete. An unauthenticated attacker with network access can read and modify a limited set of setup records, specifically contact names and email addresses captured during the initial setup...

CVE-2026-102150 Kiteworks Secure Data Forms Missing Authentication for Critical Function

A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a limited set of internal service operations on the Kiteworks platform; it did not permit access to user accounts, stored files, or form...