Fedora 43 : btrbk (2026-1528cb06a7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1528cb06a7 advisory. Update to 0.32.7 RHBZ2502632 which includes fix for CVE-2026-62943 Tenable has extracted the preceding description block directly from the Fedora security...

SUSE SLED15: java-21-openjdk / java-21-openjdk-demo / java-21-openjdk-devel / etc (SUSE-SU-2026:3332-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3332-1 advisory. Update to upstream tag jdk-21.0.12+8 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information...

SUSE SLES15 Security Update : kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3343-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3343-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: -...

SUSE SLED15: java-25-openjdk / java-25-openjdk-demo / java-25-openjdk-devel / etc (SUSE-SU-2026:3331-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3331-1 advisory. Update to upstream tag jdk-25.0.4+7 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information...

VMware Workstation 25.x < 26.0.0 Vulnerability (VMSA-2026-0006)

The version of VMware Workstation installed on the remote host is 25.x 25H2 prior to 26.0.0 26H1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

RockyLinux 9 : plexus-utils (RLSA-2026:38796)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:38796 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...

ALSA-2026:47757 Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenS...

MiracleLinux 9 : nginx-1.20.1-28.el9_8.3.ML.1 (AXSA:2026-1385:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1385:05 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the...

SUSE SLED15: apache-commons-compress / apache-commons-lang3 / beust-jcommander / etc (SUSE-SU-2026:3390-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3390-1 advisory. apache-commons-lang3 was updated to 3.20.0: New features: - Add SystemProperties.getPathString, Supplier - Add...

RockyLinux 8 : kernel-rt (RLSA-2026:47010)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47010 advisory. kernel: ipv6: fix possible UAF in icmpv6rcv CVE-2026-53006 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

RockyLinux 8 : kernel (RLSA-2026:47011)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47011 advisory. kernel: ipv6: fix possible UAF in icmpv6rcv CVE-2026-53006 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

The vulnerability of the bpf_local_storage_update() function in the kernel/bpf/bpf_local_storage.c module allows a hacker to cause a service failure.

The vulnerability of the bpflocalstorageupdate function in the kernel/bpf/bpflocalstorage.c file, which is part of the Linux kernel’s BPF support for operating system functions, relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service...

kernel security, bug fix, and enhancement update

5.14.0-687.30.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

CVE-2025-67405

CVE-2025-67405 affects Sourcecodester CASAP Automated Enrollment System 1.0. The vulnerability is a SQL Injection in update_password.php via the parameter new_password . This is the root cause, allowing unintended database queries. Documented impact shows low confidentiality, integrity, and avail...

kernel security update

6.12.0-211.39.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

CVE-2025-67405

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatepassword.php via the parameter newpassword...

Critical Photon OS Security Update - PHSA-2026-5.0-0933

Updates of 'gawk' packages of Photon OS have been released...

NVIDIA GPU Display Driver May 2026 Security Update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA GPU Display Driver for Windows which might allow denial of service, escalation of privileges, information disclosure, data tampering, and code execution. NVIDIA has released updates to mitigate these...

openSUSE 16 Security Update : agama-web-ui (openSUSE-SU-2026:21448-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21448-1 advisory. - CVE-2025-7783: form-data: unsafe Math.random function is used to select a boundary value for multipart form-encoded data bsc1246822. -...

SUSE SLES16 Security Update : runc (SUSE-SU-2026:22942-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22942-1 advisory. Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations...