RockyLinux 8 : libmicrohttpd (RLSA-2023:7090)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:7090 advisory. libmicrohttpd: remote DoS CVE-2023-27371 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note that Nessus ha...

Oracle Linux 9 : skopeo (ELSA-2026-28074)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-28074 advisory. - Rebuild for CVE-2026-32283 - Rebuild for CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

MAL-2026-6422 Malicious code in leo-config (npm)

The leo-config npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

CVE-2026-53540 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-PW6J-QG29-8W7F vulnerabilities

Vulnerabilities for packages: mitmproxy, airflow...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: systemd: systemd-261-2.hum1 aarch64, x8664 systemd-boot-unsigned-261-2.hum1 aarch64, x8664 systemd-container-261-2.hum1 aarch64, x8664 systemd-devel-261-2.hum1 aarch64, x8664...

RHSA-2026:28491 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:28211 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

Critical Photon OS Security Update - PHSA-2026-4.0-1041

Updates of 'linux', 'mariadb', 'nodejs' packages of Photon OS have been released...

Oracle Linux 9 : fence-agents (ELSA-2026-13672)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-13672 advisory. - bundled cryptography: replace with dependency to fix CVE-2026-26007 Tenable has extracted the preceding description block directly from the Oracle...

Linux Distros Unpatched Vulnerability : CVE-2026-52939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/rds: fix NULL deref in rdsibsendcqehandler on masked atomic completion rdsibxmitatomic always programs a masked atomic opcode IBWRMASKEDATOMICCMPANDSWP or...

Linux Distros Unpatched Vulnerability : CVE-2025-71319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a...

Linux Distros Unpatched Vulnerability : CVE-2026-8924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in curl's cookie parsing logic allows a malicious HTTP server to set super cookies that bypass the Public Suffix List check. This enables an...

Oracle Linux 9 : libexif (ELSA-2026-22553)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22553 advisory. - Fix integer underflow in MakerNote decoding CVE-2026-40386 Tenable has extracted the preceding description block directly from the Oracle Linux...

AlmaLinux 10 : libtasn1 (ALSA-2026:28235)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:28235 advisory. libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1expendoctetstring CVE-2025-13151 Tenable has extracted the preceding description blo...

Linux Distros Unpatched Vulnerability : CVE-2026-11352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in curl's QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because th...

AlmaLinux 10 : memcached (ALSA-2026:27842)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:27842 advisory. memcached: memcached: Username enumeration via timing side channel CVE-2026-47783 Tenable has extracted the preceding description block directly from the AlmaLin...

Linux Distros Unpatched Vulnerability : CVE-2026-52935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: espintcp: do not reuse an in-progress partial send espintcp keeps a single in-flight transmit in ctx-partial. Before building a new skmsg, espintcpsendmsg...

CVE-2026-54328

Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension package installs used predictable paths under the operating system temporary directory. On Linux-based multi-user systems, a local attacker who can write to the shared temporary...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rpm: python3-rpm-6.0.1-6.1.hum1 aarch64, x8664 rpm-6.0.1-6.1.hum1 aarch64, x8664 rpm-apidocs-6.0.1-6.1.hum1 noarch rpm-build-6.0.1-6.1.hum1 aarch64, x8664 rpm-build-libs-6.0.1-6.1.hum1 aarch64,...