PT-2026-89179

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

MiracleLinux 8 : kernel-4.18.0-553.158.1.el8_10 (AXSA:2026-1794:77)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1794:77 advisory. kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode...

RockyLinux 10 : image-builder (RLSA-2026:65534)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65534 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 crypto/x509: golang: Go crypto/x509:...

RHCOS 4 : Red Hat build of MicroShift 4.19.46 (RHSA-2026:63636)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63636 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame...

AlmaLinux 10 : kernel (ALSA-2026:63128)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:63128 advisory. kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry...

Kibana 8.x < 8.19.19 / 9.0.x < 9.3.5 DoS (ESA-2026-48)

The version of Kibana installed on the remote host is 8.x prior to 8.19.19, or 9.0.x prior to 9.3.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-48 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-106772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106772 advisory. FreeRDP before 3.29.0 affected versions = 3.28.0 contains a heap out-of-bounds read in updateprocessglyphfragments/glyphcachefragmentput in libfreerdp/cache/glyph.c...

Oracle Linux 8 : ELSA-2026-65897-0: / qt5-qtbase (ELSA-2026-658970)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-658970 advisory. 5.15.3-9 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName Resolves: RHEL-247206 Tenable has extracted the preceding description block...

Security Updates for Microsoft PowerPoint Products (September 2026)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797 - Out-of-bound...

The vulnerability of the _get_outline() function in the pypdf/_doc_common.py library of the Python library for working with PDF files, PyPDF, allows a attacker to cause a service failure.

The vulnerability of the getoutline function in the pypdf/doccommon.py library of the Python PDF handling library PyPDF is related to asymmetric resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fbcon_do_set_font() function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the fbcondosetfont function in the drivers/video/fbdev/core/fbcon.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the execution of operations outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacke...

The vulnerability of the ucsi_handle_connector_change() function in the drivers/usb/typec/ucsi/ucsi.c module of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ucsihandleconnectorchange function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

RockyLinux 10 : 389-ds-base (RLSA-2026:64785)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64785 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...

Linux Distros Unpatched Vulnerability : CVE-2026-87795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads...

RHEL 8 : kernel (RHSA-2026:65710)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65710 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: dm btree remove: fix use afte...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-106771)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106771 advisory. FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When...

SAP NetWeaver AS Java Denial of Service (3736494)

The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a denial of service vulnerability as referenced in SAP Security Note 3736494: - SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested...

RockyLinux 9 : redis:7 (RLSA-2026:65120)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65120 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Denial of Service via Out-of-Bounds Read in Clust...

Linux Distros Unpatched Vulnerability : CVE-2026-82056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent...

RHEL 9 : glib2 (RHSA-2026:65770)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65770 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...