PT-2026-78396

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description The software fails to persist the WebAuthn login challenge generated by the prepareForLogin function because the WebAuthn controller does not save the mutated key objects back to the database. Durin...

PT-2026-78575

Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a company-scoped user in FMCS floater mode can access users whose company id is null because broad API queries and bulk web actions do not consistently apply isCurrentUserHasAccess. The /api/v1/users and /api/v1/users/id/licenses...

ROS-20260819-73-0004

The vulnerability in gobgp is related to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2026-74947

Privilege escalation due to invalid pointer in the Graphics component...

Oracle Linux 8 : python3 (ELSA-2026-56219)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56219 advisory. 3.6.8-78.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-78 - Security fix for...

Oracle Linux 8 : gstreamer1-plugins-good (ELSA-2026-56966)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56966 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239048 - Fix CVE-2026-18649 in H.264/H.265 RTP depayloaders...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:56658)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:56658 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

Oracle Linux 8 : nghttp2 (ELSA-2026-55804)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-55804 advisory. 1.33.0-6.3 - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 Tenable has extracted the...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1572:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1572:02 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced...

AlmaLinux 8 : sg3_utils (ALSA-2026:56130)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:56130 advisory. sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output conformance...

Oracle Linux 8 : sg3_utils (ELSA-2026-56130)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56130 advisory. 1.44-6.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188162 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: bind (UTSA-2026-103694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-103694 advisory. A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: bind (UTSA-2026-103699)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-103699 advisory. It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This...

RHEL 9 : perl-Date-Manip (RHSA-2026:56970)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:56970 advisory. Date::Manip is a series of modules designed to make any common date/time operation easy to do. Operations such as comparing two times, determining a...

PT-2026-78509

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, compare wazuh versions in src/shared/version op.c copies the attacker-controlled enrollment V: field into a 10-byte stack buffer with strncpy but does not...

CVE-2026-74947

Privilege escalation due to invalid pointer in the Graphics component...

The vulnerability of the Windows operating system’s kernel allows a perpetrator to elevate their privileges and cause service failures.

The vulnerability of the Windows operating system’s kernel is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

PT-2026-78506

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/os crypto/shared/msgs.c decompresses up to OS MAXSTR...

PT-2026-78321

An out-of-bounds read vulnerability was found in swtpm's SWTPM NVRAM CheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap...

PT-2026-78594

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A remote attacker could cause a denial of service due to a NULL pointer dereference, which occurs when a program attempts to read or write to a memory address tha...