Linux Distros Unpatched Vulnerability : CVE-2026-63376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse in lib/compiler.js can be tricked by a table path such as a.b.y.proto.proto,...

NewStart CGSL MAIN 7.02 : xorg-x11-server-Xwayland Vulnerability (NS-SA-2026-0112)

The remote NewStart CGSL host, running version MAIN 7.02, has xorg-x11-server-Xwayland packages installed that are affected by a vulnerability: - A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer...

EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2026-3349)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf point...

NewStart CGSL MAIN 7.02 : libpng Multiple Vulnerabilities (NS-SA-2026-0100)

The remote NewStart CGSL host, running version MAIN 7.02, has libpng packages installed that are affected by multiple vulnerabilities: - A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function dopnm2png of the file contrib/pngminus/pnm2png.c of the...

KLA91268 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:65124)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65124 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...

EulerOS 2.0 SP12 : perl-DBI (EulerOS-SA-2026-3291)

According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an...

EulerOS 2.0 SP12 : mtr (EulerOS-SA-2026-3359)

According to the versions of the mtr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mtr is vulnerable to Out-of-bounds read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups ca...

Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2026-81992 - Incorrect Authorization CWE-863...

Adobe Photoshop 26.x < 26.11.7 / 27.x < 27.7 Multiple Vulnerabilities (macOS APSB26-130)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 26.11.7/27.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-130 advisory. - Integer Overflow or Wraparound CWE-190 potentially leading to Arbitrary code execution...

Linux Distros Unpatched Vulnerability : CVE-2026-86564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio- net control-queue handler can cause an out-of-bounds rea...

Fedora 44 : corosync (2026-e97124c200)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e97124c200 advisory. Fix CVE-2026-81666 and CVE-2026-81665 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Vulnerability of the unix_gc() component. Igor, MSG_PEEK. Let’s talk about the kernels of the Linux operating system, which allow attackers to cause a service failure.

Vulnerability of the unixgc component. Igor, MSGPEEK. The kernels of the Linux operating system are vulnerable to pointer dereferencing when the pointer has reached its expiration time. Exploiting this vulnerability can allow an attacker to cause a service failure...

KLA91272 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a complete...

MGASA-2026-0379 Updated exiv2 package fixes security vulnerabilities

Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds. CVE-2026-68546 Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files. CVE-2026-68547 Out of bounds read in CrwMap::decodeBasic. CVE-2026-49275...

CVE-2026-16028 Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...

[SECURITY] [DSA 6488-1] jbig2dec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6488-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 07, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6487-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 06, 2026 https://www.debian.org/security/faq -...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Apache Neethi (CVE-2026-66142,CVE-2026-66143 & CVE-2026-66144)

Summary IBM App Connect Enterprise runtime is vulnerable to a denial of service due to Apache Neethi. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which ma...

CVE-2026-86319

A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/jsonpatch/JsonPatch.java of the component Patch Operation Handler. The manipulation leads to resource consumption. It is...