CVE-2026-0830

Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before version 0.6.18 when opening maliciously crafted workspaces. To mitigate, users should update to the latest version...

MiracleLinux 9 : python3.12-setuptools-68.2.2-5.el9_6 (AXSA:2025-10714:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10714:02 advisory. setuptools: Path Traversal Vulnerability in setuptools PackageIndex CVE-2025-47273 Tenable has extracted the preceding description block directly from the...

PT-2026-2487

Name of the Vulnerable Software and Affected Versions Semantic machines version 5.4.8 Description An issue allows attackers to bypass authentication by sending a crafted HTTP request to various API endpoints. The attack targets authentication mechanisms within the software. The affected API...

MiracleLinux 8 : perl-CPAN-2.18-402.el8_10 (AXSA:2025-9982:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-9982:02 advisory. perl-CPAN: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16156 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : libxml2-2.9.7-18.el8_10.2 (AXSA:2025-9668:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9668:02 advisory. libxml: use-after-free in xmlXIncludeAddNode CVE-2022-49043 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : open-vm-tools-12.3.5-2.el8_10.1 (AXSA:2025-10966:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10966:03 advisory. open-vm-tools: Local privilege escalation in open-vm-tools CVE-2025-41244 Tenable has extracted the preceding description block directly from the MiracleLin...

MiracleLinux 8 : python-requests-2.20.0-6.el8_10 (AXSA:2025-10703:04)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10703:04 advisory. requests: Requests vulnerable to .netrc credentials leak via malicious URLs CVE-2024-47081 Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : perl-JSON-XS-3.04-4.el8_10 (AXSA:2025-10954:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10954:01 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly...

MiracleLinux 9 : dpdk-23.11-2.el9_5 (AXSA:2025-9535:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9535:01 advisory. dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library CVE-2024-11614 Tenable has extracted the preceding description block...

MiracleLinux 9 : kernel-5.14.0-503.35.1.el9_5 (AXSA:2025-9843:26)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9843:26 advisory. kernel: md: fix deadlock between mddevsuspend and flush bio CVE-2024-43855 Tenable has extracted the preceding description block directly from the MiracleLin...

MiracleLinux 9 : binutils-2.35.2-67.el9_7.1 (AXSA:2025-11579:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11579:06 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted the preceding description block directly from the MiracleLinux securi...

MiracleLinux 9 : libssh-0.10.4-17.el9_7 (AXSA:2025-11566:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11566:05 advisory. libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend CVE-2025-5987 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : git-lfs-3.6.1-4.el9_7 (AXSA:2025-11633:09)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-11633:09 advisory. git-lfs: Git LFS may write to arbitrary files via crafted symlinks CVE-2025-26625 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : qt5-qt3d-5.15.9-2.el9_6.1 (AXSA:2025-11076:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11076:02 advisory. assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow CVE-2025-11277 Tenable has extracted the preceding description blo...

MiracleLinux 9 : mod_security-2.9.6-2.el9_6 (AXSA:2025-10535:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10535:02 advisory. modsecurity: ModSecurity Has Possible DoS Vulnerability CVE-2025-47947 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 8 : bind9.16-9.16.23-0.22.el8_10.2 (AXSA:2025-9692:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9692:01 advisory. bind: bind9: Many records in the additional section cause CPU exhaustion CVE-2024-11187 Tenable has extracted the preceding description block directly from t...

MiracleLinux 8 : gcc-toolset-14-gcc-14.2.1-7.1.el8_10.ML.1 (AXSA:2025-9684:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9684:02 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block...

MiracleLinux 8 : bzip2-1.0.6-28.el8_10 (AXSA:2025-9593:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9593:01 advisory. bzip2: bzip2: Data integrity error when decompressing with data integrity tests fail. CVE-2019-12900 Tenable has extracted the preceding description block...

MiracleLinux 9 : doxygen-1.9.1-12.el9_5 (AXSA:2025-9657:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9657:01 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block...

MiracleLinux 9 : gdk-pixbuf2-2.42.6-6.el9_6 (AXSA:2025-10711:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10711:01 advisory. gdk?pixbuf: Heap?buffer?overflow in gdk?pixbuf CVE-2025-7345 Tenable has extracted the preceding description block directly from the MiracleLinux security...