Photon OS 4.0: Vim PHSA-2026-4.0-0979

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0979. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid30340...

MINI-P3CJ-V26F-79XM

Bulletin has no description...

GHSA-9F94-5G5W-GF6R CRL Distribution Point Scope Check Logic Error in AWS-LC

Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CRL distribution point matching in AWS-LC allows a revoked certificate to bypass revocation checks during certificate validation, when the application enables CRL checking and uses partitioned CRLs wi...

CVE-2026-23264

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 "drm/amd: Refactor amdgpuaspm to be...

MINI-2GFH-WQRJ-PHQM

Bulletin has no description...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2026-006161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006161 advisory. A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can lea...

GHSA-9R75-G2CR-3H76

creationtimestamp| type| source ---|---|--- 2026-03-06 20:10:06+00:00| seen| https://gist.github.com/alon710/6327cd7c8e0c4f035cf6ad7379bcfa32...

CVE-2026-20020

creationtimestamp| type| source ---|---|--- 2026-03-04 20:12:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgb3rl6hnr27...

GHSA-25PW-4H6W-QWVM

creationtimestamp| type| source ---|---|--- 2026-03-04 11:10:06+00:00| seen| https://gist.github.com/alon710/3e78bbd825aa833ce30636ac23456c1d...

MINI-JMFR-GQX8-FVHC

Bulletin has no description...

MINI-2WRX-953C-2PJR

Bulletin has no description...

Astra Linux – Vulnerability in xorg-server

A flaw was discovered in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can result in dangling pointers, leading to a use-after-free condition. This can cause memory corruption or a system crash, potentiall...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: rng – Ensure that setent is always present. Ensure that setent is always set, as it is only provided by drbg...

Malicious Package

Overview magala is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MINI-C986-RX4Q-JX9W

Bulletin has no description...

PT-2026-22463

The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog...

phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint

Summary The WebAuthn prepare endpoint /api/webauthn/prepare creates new active user accounts without any authentication, CSRF protection, CAPTCHA, or configuration checks. This allows unauthenticated attackers to create unlimited user accounts even when registration is disabled. Details File:...

PT-2026-21925

Name of the Vulnerable Software and Affected Versions Linksys MR9600 version 1.0.4.205530 Linksys MX4200 version 1.0.13.210200 Description A lack of proper authentication allows a user with physical access to the device to misuse the mesh functionality. This can lead to gaining access to sensitiv...

CGA-P67X-7Q3F-C5CP

Bulletin has no description...

CVE

...