Linux Distros Unpatched Vulnerability : CVE-2026-38819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device...

Linux Distros Unpatched Vulnerability : CVE-2025-70291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - u-boot - None CVE-2025-70291 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001435 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: drop ppath from ext4extreplayupdateex to avoid double-free When calling...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001441 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans During loopback...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002887)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002887 advisory. In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow Since devsearchpath can technically be as lar...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001500 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if t...

Unity Linux 20.1070e Security Update: gawk (UTSA-2026-104951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104951 advisory. Use After Free vulnerability has been found in io.c program file of gawk dogetlineredir routine. This issue may lead to a crash. It affectsgawk in versions 5.4.0 and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001433 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of ST...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-104993)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104993 advisory. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII- only label. For example, ToUnicodexn--example-.com incorrectl...

VulnCheck KEV: CVE-2026-0768

Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the code...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001430 advisory. In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a tunnel When rx-udp-gro-forwarding is enabled...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002980 advisory. An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue...

Unity Linux 20.1070e Security Update: rubygem-websocket-driver (UTSA-2026-104957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104957 advisory. Impact If this library is used in tandem with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002304 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nlaneststart nlaneststart may fail and return NULL. Insert a check and set...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001420)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001420 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b ALSA: core:...

Unity Linux 20.1070e Security Update: spice-vdagent (UTSA-2026-104939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104939 advisory. A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability c...

PT-2026-83502

Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...

Linux Distros Unpatched Vulnerability : CVE-2026-52681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid credentials can reset the accounting by repeatedly changing the active...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002714)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002714 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Prevent lock inversion deadlock in map delete elem syzkaller started using corpuse...

GLSA-202608-33 : Freenet: Deanonymization Vulnerability

The remote host is affected by the vulnerability described in GLSA-202608-33 Freenet: Deanonymization Vulnerability A vulnerability has been discovered in Freenet. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from th...