Oracle Linux 8 / 9 : java-1.8.0-openjdk (ELSA-2026-42877)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42877 advisory. 1:1.8.0.502.b07-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.502.b07-1.1 - Update to 8u502-b07 GA. - Update release notes for...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 8 : fence-agents (ELSA-2026-53363)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53363 advisory. 4.2.1-129.29 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217923 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : resource-agents (ELSA-2026-53364)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-53364 advisory. 4.9.0-54.37 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217924 Tenable has extracted the preceding description block directly from the Oracle Linux...

PT-2026-71288

Budibase is an open-source low-code platform. Prior to 3.40.1, packages/server/src/integrations/mongodb.ts passed builder-controlled tlsCertificateKeyFile and tlsCAFile values directly to MongoClient on Budibase Cloud. A builder could submit absolute server paths through /api/datasources/verify a...

Oracle Linux 10 : grafana (ELSA-2026-54178)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54178 advisory. - Resolves RHEL-211020: CVE-2026-33377 - Resolves RHEL-211376: CVE-2026-8609 - Resolves RHEL-210981: CVE-2026-33376 - Resolves RHEL-211389:...

Oracle Linux 10 : kernel (ELSA-2026-53330)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-53330 advisory. - mm/slab: do not limit zeroing to origsize when only red zoning is enabled Rafael Aquini RHEL-223405 CVE-2026-64368 - net: openvswitch: reject...

Oracle Linux 9 : fence-agents (ELSA-2026-53365)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53365 advisory. 4.10.0-110.6 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : isns-utils (ELSA-2026-53846)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53846 advisory. 0.103-1.1 - Fix double-free vulnerability in attrs.c error paths CVE-2026-55995 Resolves: RHEL-219472 Tenable has extracted the preceding description block...

Oracle Linux 8 : isns-utils (ELSA-2026-53848)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-53848 advisory. 0.99-1.1 - Fix double-free vulnerabilities in attrs.c error paths CVE-2026-55995 Tenable has extracted the preceding description block directly from the Oracle...

kernel security, bug fix, and enhancement update

6.12.0-211.46.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

kernel security, bug fix, and enhancement update

5.14.0-687.38.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 7 : dovecot (ELSA-2026-49513)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49513 advisory. - Backport fix for CVE-2026-42006 Orabug: 39820967 - Backport fix for CVE-2025-59032 Orabug: 39573795 - Backport fix for CVE-2026-27856 Orabug: 39573795 -...

PT-2026-70067

Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description Missing authorization checks in the upload azure, upload sftp, and upload smb VQL plugins allow an authenticated user with the analyst role to initiate outbound network connections from...

Oracle Linux 7 : libarchive (ELSA-2026-8517)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-8517 advisory. - Fix CVE-2026-4424 CVE-2026-5121 Orabug: 39219508 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 9 : libarchive (ELSA-2026-52674)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-52674 advisory. - Related: CVE-2026-14164 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not test...

Oracle Linux 9 : postgresql (ELSA-2026-52395)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-52395 advisory. - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 SSL/GSS init causes denial of...

Oracle Linux 10 : kernel (ELSA-2026-34911)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-34911 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. ASAN reports a heap integrity violation...

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...