Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : ca-certificates update (USN-8944-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has a package installed that is affected by a vulnerability as referenced in the USN-8944-1 advisory. This update removes the emSign ECC Root CA - G3 CA certificate due to intermediate CA certificates being compromised. In addition,...

RHEL 9 : gvfs (RHSA-2026:85939)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85939 advisory. GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: flatpak (UTSA-2026-142358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142358 advisory. In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by...

RHEL 9 : gvfs (RHSA-2026:85944)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85944 advisory. GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: flatpak (UTSA-2026-142354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142354 advisory. A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system...

PT-2026-120233

HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructions in documents or web pages the agent processes. BashTool and BackgroundRunTool pass model-emitted commands to...

Red Hat: CVE-2026-114406: ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

FreeBSD-SA-26:73.caroot

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:73.caroot Security Advisory The FreeBSD Project Topic: TLS certificate store update due to eMudhra compromise Category: core Module: caroot Announced:...

RHEL 10 : gvfs (RHSA-2026:85941)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85941 advisory. GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol...

RockyLinux 8 : kbd (RLSA-2026:78951)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:78951 advisory. kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login CVE-2026-72693 Tenable has extracted the...

RHEL 8 : flatpak (RHSA-2026:80687)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80687 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak:...

PT-2026-134801

This update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificate due to intermediate CA certificates being compromised...

Linux Distros Unpatched Vulnerability : CVE-2026-95837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU...

OnePlus OxygenOS command injection vulnerability

A security vulnerability exists in OnePlus OxygenOS versions prior to 16.1.0 through 16.1.10.500, 16.0.0 through 16.0.5.1200, and 15.0.0 through 15.0.0.2000. This vulnerability arises because the atlasservice binder interface permits unauthorized acceptance of setEvent calls. Additionally, the...

PT-2026-120692

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series versions prior to X15.5.20 Description An unauthenticated remote attacker with network access to Cisco Expressway Core Expressway-C or Cisco Expressway Edge Expressway-E devices can execute arbitrary operating system...

FreeBSD -- TLS certificate store update due to eMudhra compromise

Problem Description: eMudhra generated several of its TLS intermediate CA certificates using a flawed procedure that used trivially small private keys. The keys have been recovered by several parties and publicly disclosed. The intermediates are signed by the "emSign ECC Root CA - G3" root...

Cisco AnyConnect: CVE-2026-76462: Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability

A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

By default, uv verifies TLS connections against a vendored copy of the webpki-root-certs bundle. Versions before 0.13.4 include the emSign ECC Root CA - G3 root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them.An attack...

PYSEC-2026-4321 uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

By default, uv verifies TLS connections against a vendored copy of the webpki-root-certs bundle. Versions before 0.13.4 include the emSign ECC Root CA - G3 root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them. An...

certifi bundles emSign root CAs with compromised intermediate CA keys

Certifi versions before 2026.10.18 include the emSign ECC Root CA - G3 root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue...