Fedora 43 : libxls (2026-5dace9d06e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5dace9d06e advisory. - Backport CVE patches - fixes CVE-2026-26824 rhbz2484566 - fixes CVE-2026-26825 rhbz2484567 Tenable has extracted the preceding description block...

RockyLinux 8 : gstreamer1-plugins-good (RLSA-2026:59179)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59179 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution v...

RHEL 8 : python-pyasn1 (RHSA-2026:59246)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59246 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 9 : sqlite (RHSA-2026:58936)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58936 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a sing...

MiracleLinux 9 : [security - high] ruby:3.3, ruby-3.3.12-8.module+el9+1184+356a24c3 (AXSA:2026-1647:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1647:01 advisory. zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF...

UBUNTU-CVE-2026-59183

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32t multiplication in OpenEXRCore's unpacksampletable can overflow while decoding...

TencentOS Server 4: microcode_ctl (TSSA-2026:0851)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0851 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.12)

The version of AOS installed on the remote host is prior to 7.5.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.12 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...

The vulnerability of the ice_devlink_reinit_down() function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icedevlinkreinitdown function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the pointer L. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the bpf_int_jit_compile() function in the arch/arm64/net/bpf_jit_comp.c module, which is part of the network support functionality on the ARM 64-bit kernel of the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfintjitcompile function in the arch/arm64/net/bpfjitcomp.c module, which is part of the networking support on the ARM 64-bit kernel of the Linux operating system, is related to errors during pointer scaling. Exploiting this vulnerability could allow an attacker to...

CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

!/usr/bin/env python3 """ CVE-2026-42167 — ProFTPD modsql post-authentication SQL injection - RCE postauthstorrce.py --host --port 21 \ --user --password \ --shell-host --shell-port 443 SUMMARY ------- ProFTPD's modsql logs FTP activity through user-supplied SQL. Its escaping helper isescapedtext...

OpenSSL 3.4.0 < 3.4.7 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.4.7. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.4.7 advisory. - Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and n...

CVE-2026-63076

Invalid Pointer Dereference in CMP Server via Crafted protectionAlg...

Oracle Linux 7 : 389-ds-base (ELSA-2026-36205)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36205 advisory. - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 - Security fix for CVE-2026-9064 Orabug: 39570202 - Security fix for CVE-2025-149...

Oracle Linux 9 : python3.12 (ELSA-2026-59009)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59009 advisory. 3.12.14-1.0.1 - Remove upstream URL reference 3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227215 3.12.13-3.1 - Security fix for CVE-2026-15308 Resolves...

OpenSSL 3.0.0 < 3.0.22 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.0.22. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.22 advisory. - Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and...

EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-3176)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...

EulerOS Virtualization 2.13.1 : rsync (EulerOS-SA-2026-3196)

According to the versions of the rsync packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list...

The vulnerability of the `vidtv_channel_pmt_match_sections()` function in the `drivers/media/test-drivers/vidtv/vidtv_channel.c` file, a driver for multimedia devices in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the vidtvchannelpmtmatchsections function in the drivers/media/test-drivers/vidtv/vidtvchannel.c file, a driver for multimedia devices in the Linux kernel, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

RHEL 8 : sg3_utils (RHSA-2026:59555)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59555 advisory. The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes:...