EUVD-2026-90521

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

CVE-2026-103544 datadrivenconstruction OpenConstructionERP Al Provider Configuration ai_client.py wrong session

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

CVE-2026-103544: Exposure of Data Element to Wrong Session

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/aiclient.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to wro...

PT-2026-105917

A vulnerability in Hugging Face Transformers versions 4.49.0, = 5.8.1 allows remote Python files to be written to local disk without user consent when using GenerativePreTrainedModel.load custom generate. The function fetches and caches a remote module file before performing the required trust...

Rocky Linux 9.2 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1453)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261453 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.2. It addresses 5 CVEs: CVE-2026-27784, CVE-2026-1642, CVE-2026-27651,...

Rocky Linux 9.2 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc Multiple Vulnerabilities (ciqsa-2026_1563)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261563 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2026-60005, CVE-2026-42055. Tenable has extracted the...

Rocky Linux 10.2 [CIQ] Security Update: python3-pyasn1 / python3-pyasn1-modules (crlsa-2026_59243)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202659243 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.6 [TuxCare] Security Update: grub2-common / grub2-efi-aa64-modules / grub2-efi-x64 / etc (ALMALINUX9.6:CLSA-2026:1771504803)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771504803 advisory. - A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext...

AlmaLinux 9.2 [TuxCare] Security Update: gdk-pixbuf2 / gdk-pixbuf2-devel / gdk-pixbuf2-modules / etc (ALMALINUX9.2:CLSA-2025:1757698525)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757698525 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8 [CIQ] Security Update: nginx / nginx-all-modules / nginx-debuginfo / nginx-debugsource / etc Multiple Vulnerabilities (crlsa-2026_6907)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266907 advisory. nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files CVE-2026-32647 NGINX: NGINX: Denial of Service or file modification via...

Rocky Linux 10.2 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (crlsa-2026_36364)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202636364 advisory. nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Bug Fixes and Enhancements...

Rocky Linux 9.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc (ciqsa-2026_1476)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261476 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-42055. Tenable has extracted the preceding description blo...

CentOS Linux 7 [TuxCare] Security Update: python2-pyasn1 / python2-pyasn1-modules (CENTOS7:CLSA-2026:1774431305)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1774431305 advisory. - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from...

Rocky Linux 9.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1381)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261381 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.6. It addresses 2 CVEs: CVE-2026-9256, CVE-2026-42945. Tenable has extracted the...

Rocky Linux 9 [CIQ] Security Update: python3-pyasn1 / python3-pyasn1-modules (crlsa-2026_3359)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263359 advisory. pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID CVE-2026-23490 Tenable has extracted the preceding description block directly...

Rocky Linux 9.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1452)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261452 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.6. It addresses 5 CVEs: CVE-2026-27784, CVE-2026-1642, CVE-2026-27651,...

Rocky Linux 10.1 [CIQ] Security Update: python3-pyasn1 / python3-pyasn1-modules (crlsa-2026_3354)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263354 advisory. pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID CVE-2026-23490 Tenable has extracted the preceding description block...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.2:CLSA-2025:1752516250)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752516250 advisory. - When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client...

PT-2026-103712

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/ai client.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to...

Rocky Linux 9.2 [CIQ] Security Update: kernel-rt-debug-devel-matched / kernel-rt-debug-modules-core / etc Multiple Vulnerabilities (ciqsa-2026_1238)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261238 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.2. It addresses 12 CVEs: CVE-2024-36971, CVE-2024-41090, CVE-2024-53104,...