RHEL 10 : libcupsfilters (RHSA-2026:56965)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:56965 advisory. Libcupsfilters provides a library, which implements common functions used in cups-browsed daemon and printing filters, and additional file...

Linux Distros Unpatched Vulnerability : CVE-2026-72346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume The drive...

PT-2026-78465

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A remote attacker could cause a denial of service due to a NULL pointer dereference, which occurs when a program attempts to read or write to a memory address tha...

Oracle Linux 8 : pcp (ELSA-2026-55560)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55560 advisory. - Fix CVE-2026-16524: command injection in linuxsockets PMDA RHEL-213662 - Fix CVE-2026-16526: set FDCLOEXEC on AFUNIX sockets RHEL-213686 - Fix missi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: bind (UTSA-2026-103695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-103695 advisory. If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit...

RHEL 10 : php8.4 (RHSA-2026:56969)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:56969 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also...

Linux Distros Unpatched Vulnerability : CVE-2026-74947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and...

AlmaLinux 8 : php:8.2 (ALSA-2026:47749)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:47749 advisory. php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD CVE-2026-14355 Bug Fixes and Enhancements: Rebase PHP to 8.2.32 for...

RockyLinux 8 : sg3_utils (RLSA-2026:56130)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:56130 advisory. sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output conformance...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: resource-agents (UTSA-2026-103696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-103696 advisory. pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact...

MiracleLinux 8 : bind-9.11.36-16.el8_10.14 (AXSA:2026-1553:08)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1553:08 advisory. bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-13321 bind: bind9: Potential memory usage beyond configured limits...

Linux Distros Unpatched Vulnerability : CVE-2026-74418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dma-fence: Fix potential tracepoint null pointer dereferences Tracedmafencesignaled,...

RockyLinux 9 : .NET 9.0 (RLSA-2026:55856)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55856 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

Oracle Linux 9 : glib2 (ELSA-2026-55440)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55440 advisory. - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58012: buffe...

CentOS 9 : python3.9-3.9.25-10.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python3.9-3.9.25-10.el9 build changelog. - tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a...

SUSE SLES15 Security Update : redis (SUSE-SU-2026:3637-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3637-1 advisory. This update for redis fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK pending...

AlmaLinux 8 : python3 (ALSA-2026:56219)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:56219 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding descriptio...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1574:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1574:01 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced...

MiracleLinux 8 : haproxy-1.8.27-5.el8_10.2 (AXSA:2026-1575:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1575:02 advisory. haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 Tenable has extracted the preceding description block directly from the...

AlmaLinux 9 : bind9.18 (ALSA-2026:55442)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55442 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-133...