TencentOS Server 4: microcode_ctl (TSSA-2026:0851)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0851 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Oracle Linux 9 : python3.12 (ELSA-2026-59009)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59009 advisory. 3.12.14-1.0.1 - Remove upstream URL reference 3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227215 3.12.13-3.1 - Security fix for CVE-2026-15308 Resolves...

RockyLinux 10 : nginx (RLSA-2026:59220)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59220 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of servic...

OpenSSL 3.4.0 < 3.4.7 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.4.7. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.4.7 advisory. - Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and n...

RockyLinux 9 : grafana (RLSA-2026:58982)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58982 advisory. grafana: Grafana: Privilege escalation via dashboard overwrite CVE-2026-33377 grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6...

RHEL 8 : webkit2gtk3 (RHSA-2026:59326)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59326 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript...

The vulnerabilities of the functions brcmf_ops_sdio_probe() (drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c), brcmf_pcie_probe() (drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c), and brcmf_usb_probe() (drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c) in the Broadcom wireless adapter driver software for Linux operating systems, allowing a hacker to cause system failures.

The vulnerabilities of the functions brcmfopssdioprobe drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c, brcmfpcieprobe drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c, and brcmfusbprobe drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c in Broadcom wireless adapter drivers i...

The vulnerability of the libie_fwlog_deinit() function in the drivers/net/ethernet/intel/libie/fwlog.c source code of the Ethernet driver for Intel’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the libiefwlogdeinit function in the drivers/net/ethernet/intel/libie/fwlog.c source code of the Ethernet driver for Intel’s Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bpf_int_jit_compile() function in the arch/arm64/net/bpf_jit_comp.c module, which is part of the network support functionality on the ARM 64-bit kernel of the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfintjitcompile function in the arch/arm64/net/bpfjitcomp.c module, which is part of the networking support on the ARM 64-bit kernel of the Linux operating system, is related to errors during pointer scaling. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the ice_devlink_reinit_down() function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icedevlinkreinitdown function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the pointer L. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the CMS protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the CMS protocol analyzer, which is also used for analyzing computer network traffic with Wireshark, relates to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service interruptions...

The vulnerability of the amdgpupciSlotReset() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_device.c source code of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpupciSlotReset function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c source code of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allo...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-81336

Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with XML...

The vulnerability of the fw_change() function in the net/sched/cls_fw.c module of the network scheduling subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fwchange function in the net/sched/clsfw.c module of the network scheduling subsystem of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `coretemp_device_add()` function in the `drivers/hwmon/coretemp.c` driver module for monitoring Linux kernel equipment allows a hacker to cause a service failure.

The vulnerability of the coretempdeviceadd function in the drivers/hwmon/coretemp.c driver for monitoring hardware in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-81904

GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated user. retrieveAttachmentFromIdParam in apps/app/src/server/routes/attachment/get.ts guards the check with a condition requiring the user to be non-null, so a request that carries n...

PT-2026-81754

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Chromoting allows a remote attacker to execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption fla...

AlmaLinux 10 : python3.12 (ALSA-2026:58902)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58902 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding descripti...

Oracle Linux 7 : 389-ds-base (ELSA-2026-36205)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36205 advisory. - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 - Security fix for CVE-2026-9064 Orabug: 39570202 - Security fix for CVE-2025-149...