RHEL 9 : python-pyasn1 (RHSA-2026:59239)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59239 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

AlmaLinux 10 : python3.12 (ALSA-2026:58902)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58902 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding descripti...

Linux Distros Unpatched Vulnerability : CVE-2026-78681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers can craft X...

RockyLinux 9 : python-pyasn1 (RLSA-2026:59242)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59242 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the RockyLinux...

RHEL 9 : python-pyasn1 (RHSA-2026:59247)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59247 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 9 : python-urllib3 (RHSA-2026:59409)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:59409 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

RHEL 8 : python-pyasn1 (RHSA-2026:59248)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59248 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RockyLinux 9 : python3.14 (RLSA-2026:58901)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58901 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding descripti...

EulerOS Virtualization 2.13.1 : python-pip (EulerOS-SA-2026-3193)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

RHEL 8 : python-pyasn1 (RHSA-2026:59245)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59245 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

PT-2026-81489

Name of the Vulnerable Software and Affected Versions Amazon Strands Agents Tools versions prior to 0.8.5 Description Improper neutralization of input used for Large Language Model LLM prompting in the python repl tool allows remote actors to execute arbitrary Python code on the agent's host. Thi...

CVE-2026-15310: Uncontrolled Resource Consumption

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

PT-2026-81324

Name of the Vulnerable Software and Affected Versions Python affected versions not specified Description When decompressing crafted zip files using bzip, LZMA, or Zstandard compressions, the software may use an attacker-controlled size to pre-allocate memory, which can lead to memory exhaustion...

PT-2026-86156

Summary HttpCommunicationProtocol.call tool validates only the pre-redirect tool URL, then issues the request with redirects enabled and never re-checks where it lands. A tool whose endpoint is an attacker-controlled public URL can therefore 302-redirect the UTCP client into an internal service...

RHEL 9 : python-pyasn1 (RHSA-2026:59244)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59244 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Oracle Linux 10 : python-pyasn1 (ELSA-2026-59243)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59243 advisory. 0.6.2-1.1 - Fix CVE-2026-59886: prevent overflow in Real.float when converting ASN.1 Real values with large exponents Resolves: RHEL-217904 Tenable has...

EulerOS Virtualization 2.13.1 : python-paramiko (EulerOS-SA-2026-3191)

According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

RockyLinux 8 : python-pyasn1 (RLSA-2026:59241)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59241 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the RockyLinux...

Oracle Linux 8 : python-pyasn1 (ELSA-2026-59241)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59241 advisory. - Fix denial of service in Real type float method CVE-2026-59886 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : python-urwid (ELSA-2026-58562)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58562 advisory. - Use secure random session identifiers in web display CVE-2026-9323 Tenable has extracted the preceding description block directly from the Oracle Linux...