ROS-20260914-73-0050

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

libkcapi security, bug fix, and enhancement update

1.4.0-3.0.1 - Change distronameext in spec file to oracle 1.4.0-3 - Remove ansicprng test as new kernels don't support it Resolves: RHEL-242707 - Add tag processing in AEAD decryption without ciphertext Resolves: RHEL-242667 - CVE-2026-71226: Fix memory corruption via uncanceled AIO requests on...

The vulnerability of the Internal Operations component of the Oracle In-Memory Cost Management for Discrete Industries software allows a hacker to gain unauthorized access to create, delete, or modify protected information.

The vulnerability of the Internal Operations component of the Oracle In-Memory Cost Management for Discrete Industries software solution is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to create, delete, or modify...

The vulnerability of the Internal Operations component of the Oracle Spares Management software allows a perpetrator to gain full control over the system.

The vulnerability of the Internal Operations component of the Oracle Spares Management software lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to gain full control over the system through HTTP requests...

The vulnerability of the Siebel Cloud Manager component in the cloud version of the Siebel CRM Cloud Applications management system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Siebel Cloud Manager cloud version of the Siebel CRM Cloud Applications system’s customer relationship management system is related to lack of access control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

AlmaLinux 10 : libkcapi (ALSA-2026:67267)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67267 advisory. libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries CVE-2026-71225 libkcapi: Memory...

Linux Distros Unpatched Vulnerability : CVE-2026-90463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the sssd NSS responder. This input validation vulnerability allows a local attacker, by sending specially crafted service lookup requests to...

The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the graphical user interface of Fortinet’s FortiSandbox and FortiSandbox Cloud systems relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through specially...

RHEL 9 : nginx:1.26 (RHSA-2026:67283)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67283 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...

RHEL 9 : nginx:1.24 (RHSA-2026:67308)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67308 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...

RHEL 10 : nginx (RHSA-2026:67314)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67314 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...

RHEL 8 : nginx:1.24 (RHSA-2026:67315)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67315 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...

ALSA-2026:67315 Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

RockyLinux 9 : nginx:1.26 (RLSA-2026:67283)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67283 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the RockyLinu...

RockyLinux 9 : nginx:1.24 (RLSA-2026:67308)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67308 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the RockyLinu...

RockyLinux 8 : nginx:1.24 (RLSA-2026:67315)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67315 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the RockyLinu...

ALSA-2026:67314 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

ALSA-2026:67265 Moderate: libkcapi security, bug fix, and enhancement update

libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer request...

ALSA-2026:67283 Moderate: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-requests (UTSA-2023-002301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002301 advisory. Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint...