Oracle Linux 10 : ELSA-2026-61377-0: / nodejs24 (ELSA-2026-613770)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613770 advisory. 1:24.19.0-1.0.1 - Add c-ares as dependency orabug 39781256 - Update upstream references 1:24.19.0-1 - Update to version 24.19.0 Tenable has extracte...

Oracle Linux 9 : image-builder (ELSA-2026-23228)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-23228 advisory. 72.0.0-1.0.1 - Adopt upstream image-builder 72.0.0 tarball and spec file Orabug: 39666668 - Adopt Oracle Linux Support merged upstream in PR 2404...

Oracle Linux 10 / 8 / 9 : microcode_ctl (ELSA-2026-500239)

The remote Oracle Linux 10 / 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500239 advisory. - Security advisories: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html CVE-2025-31936...

Fedora 44 : proftpd (2026-f073efe2f3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f073efe2f3 advisory. Current upstream maintenance release, with a handful of potentially security-related bugfixes. Tenable has extracted the preceding description block directly...

Fedora 43 : freerdp (2026-e0f5d28f57)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e0f5d28f57 advisory. Update to 3.31.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

PT-2026-85203

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

HPESBHF05110 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01427, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1570...

HPESBHF05120 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01442, Intel Xeon Processor Firmware Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1570 Performance - Prior to BIOS...

nodejs:24 security update

nodejs 1:24.18.0-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 1:24.18.0-3 - Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822...

openSUSE 16: gegl / gegl-0_4 / gegl-0_4-lang / gegl-devel / libgegl-0_4-0 / etc (openSUSE-SU-2026:21731-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21731-1 advisory. Changes in gegl: - CVE-2026-18300: libs/rgbe: fix 200kb report from ZDI bsc1276229 Tenable has extracted the preceding description block directly from t...

image-builder security update

72.0.0-1.0.1 - Adopt upstream image-builder 72.0.0 tarball and spec file Orabug: 39666668 - Adopt Oracle Linux Support merged upstream in PR 2404...

HPESBHF05143 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01439, Intel Xeon processor with Alias Checking Trusted Module Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1570 Performance - Prior to BIOS...

glibc-2.44-1.1 on GA media (moderate)

glibc-2.44-1.1 on GA media Announcement ID: openSUSE-SU-2026:11660-1 Rating: moderate Cross-References: CVE-2026-6368 CVE-2026-6791 CVSS scores: CVE-2026-6368 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2026-6791 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H Affected...

Oracle Linux 8 : ELSA-2026-62583-0: / nodejs:24 (ELSA-2026-625830)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625830 advisory. - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 -...

java-21-openjdk security update

1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625 1:21.0.12.1.1-1.1 - Update to jdk-21.0.12.1+1 GA - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - This...

A Blind Trust, the Bloody Thrust: When Attacker-Controlled Hook Updates Steer AI Agent Harnesses Towards Malicious Behaviors

Modern AI agent harnesses expose lifecycle hooks that bind shell commands to runtime events such as session start, tool calls, and file edits. These commands run with host privileges yet ship as lifecycle-hook configuration and may fire at times the LLM never observes. We identify the...

led-class Heap Buffer Overflow DoS

The vulnerability of the ledget function in the drivers/leds/led-class.c module related to Linux LED support in the Linux kernel is associated with errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

MiracleLinux 9 : freerdp-2.11.7-7.el9_8.6 (AXSA:2026-1752:27)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1752:27 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafte...

openSUSE 16: orthanc / orthanc-authorization / orthanc-devel / orthanc-dicomweb / etc (openSUSE-SU-2026:21728-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21728-1 advisory. Changes in orthanc: - Version 1.13.0 Highlights: complete rewrite of how DICOM files are retrieved from the storage area, parsed, and transcoded. The...

grafana-pcp security update

5.3.0-8.1 - Rebuilt for updated golang - Resolves RHEL-241480, RHEL-251115, RHEL-242257, RHEL-242154, RHEL-241751 5.3.0-8 - Resolves RHEL-188287: Remove Lua ExclusiveArch macro for Konflux build...