Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-102698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102698 advisory. Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process,in PHP versionsfrom 8.2. before 8.2.3...

Oracle Business Intelligence Publisher (August 2026 CSPU)

The 8.2.0.0.0 and 26.01.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API...

MLflow < 3.15.0 SSRF (CVE-2026-64849)

The version of MLflow installed on the remote host is prior to 3.15.0. It is, therefore, affected by a server-side request forgery vulnerability: - The unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl only for the original URL while the webhook delivery...

Fedora 43 : dotnet9.0 (2026-9c8770dffb)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9c8770dffb advisory. Update to .NET SDK 9.0.120 and Runtime 9.0.19 Fixes:...

Oracle Linux 10 : kernel (ELSA-2026-57251)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-57251 advisory. - udf: fix partition descriptor append bookkeeping CKI Backport Bot RHEL-179570 CVE-2026-45991 - crypto: pcrypt - Fix handling of MAYBACKLOG requests...

Linux Distros Unpatched Vulnerability : CVE-2026-63481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier, the redirect handling in...

Linux Distros Unpatched Vulnerability : CVE-2026-54770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response.makelocationabsolute in src/webob/response.py checks a Location value for a UR...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099437 advisory. Stack buffer overflow in PostgreSQL module refint allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A...

AlmaLinux 10 : java-21-openjdk (ALSA-2026:55787)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55787 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has extracted...

PT-2026-79453

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting XSS vulnerability in the synchro import script. This issue has been fixed in version 3.2.3...

Linux Distros Unpatched Vulnerability : CVE-2026-18299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2026:3654-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3654-1 advisory. This update for container-suseconnect rebuilds it against the current go security release. Tenable has extracted the preceding description...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: skopeo (UTSA-2026-102707)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102707 advisory. A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-102695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102695 advisory. A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ansible (UTSA-2026-050399)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-050399 advisory. A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs wh...

Fedora 43 : i2c-display (2026-c898a0f547)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c898a0f547 advisory. Update to 0.5.4 fixes CVE-2026-46604 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-101894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101894 advisory. Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pgdump, which...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102041 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates its temporary auth/ICV layout...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102036)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102036 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG on unexpected delayed ref type in runonedelayedref There is no need to BUG, we c...

Oracle Business Intelligence Enterprise Edition (OAS 26.01) (August 2026 CSPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 26.01.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API...