Photon OS 5.0: Linux PHSA-2026-5.0-0761

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0761. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Openjdk21 PHSA-2026-4.0-0961

An update of the openjdk21 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0961. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-0752

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0752. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Alsa PHSA-2026-5.0-0755

An update of the alsa package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0755. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2019-25341

CVE-2019-25341 affects iNetTools for iOS (version 8.20) where the Whois feature is vulnerable to a denial-of-service via a crafted 98-character input in the Domain Name field, causing the app to crash. The CVSS metrics indicate a high-severity impact with availability loss (AV:N/AC:L/PR:N/UI:N/S:...

CVE-2025-54756

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device information. The latest release fixes this issue for new installations; users of old installations are encouraged to change all...

AZL-77586 CVE-2026-2005 affecting package postgresql for versions less than 14.21-1

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected...

Important Photon OS Security Update - PHSA-2026-5.0-0760

Updates of 'linux-esx', 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-0761

Updates of 'linux-esx', 'linux' packages of Photon OS have been released...

CVE-2026-25933: Improper Neutralization of Special Elements used in an OS Command

Arduino App Lab is a cross-platform IDE for developing Arduino Apps. Prior to 0.4.0, a vulnerability was identified in the Terminal component of the arduino-app-lab application. The issue stems from insufficient sanitization and validation of input data received from connected hardware devices,...

CVE-2025-54756: Use of Default Credentials

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 use a default password that is guessable with knowledge of the device information. The latest release fixes this issue for new installations; users of old installations are encouraged to change all...

PT-2026-7862

Name of the Vulnerable Software and Affected Versions BrightSign players versions prior to 8.5.53.1 series 4 BrightSign players versions prior to 9.0.166 series 5 Description BrightSign players utilize a default password that can be easily guessed if device information is known. This allows...

CVE-2026-25828: Improper Neutralization of Special Elements used in an OS Command

grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...

Moderate Photon OS Security Update - PHSA-2026-5.0-92-0761

Updates of 'linux-esx' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0761

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0760

Updates of 'linux-esx' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-90-0760

Updates of 'linux-esx' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2026-5.0-90-0761

Updates of 'linux-esx' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-4.0-0961

Updates of 'openjdk21', 'openjdk11' packages of Photon OS have been released...

CVE-2026-20677

A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Tahoe 26.3, macOS Sonoma 14.8.4, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3. A shortcut may be able to bypass sandbox restrictions...