SUSE SLED15 / SLES15 Security Update : rsync (SUSE-SU-2026:3657-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3657-1 advisory. - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist...

Linux Distros Unpatched Vulnerability : CVE-2026-63310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform...

PT-2026-79638

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in module event cache removal A module-only event filter such as ":mod:foo" is cached with a NULL event mod-match when foo has not been loaded. If a later write tries to remove a specific mat...

Linux Distros Unpatched Vulnerability : CVE-2026-74660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its final RCU grace period also drains readers that obtained the...

SUSE SLES15: kubernetes1.33-client / kubernetes1.33-client-bash-completion / etc (SUSE-SU-2026:3659-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3659-1 advisory. This update for kubernetes-old rebuilds it against the current go security release. Tenable has extracted the preceding description block...

MiracleLinux 9 : ldns-1.7.1-12.el9_8.1 (AXSA:2026-1603:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1603:02 advisory. ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching CVE-2026-10846 Tenable has extracted the preceding description block...

Debian dsa-6459 : libnet-dns-perl - security update

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6459 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6459-1 [email protected] https://www.debian.org/securit...

MiracleLinux 9 : iscsi-initiator-utils-6.2.1.11-1.git4b3e853.el9_8.2 (AXSA:2026-1615:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1615:01 advisory. open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket CVE-2026-44944 open-iscsi: open-iscsi: Privilege Escalation via Path...

SUSE SLED15 / SLES15 Security Update : cosign (SUSE-SU-2026:3666-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3666-1 advisory. This update for cosign rebuilds it against the current go security release. Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-54789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party...

Linux Distros Unpatched Vulnerability : CVE-2026-74645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/lrusort: error out for 10000 activemembp damosquotascore can trigger division by zero if the target value is zero. DAMONLRUSORT lets users set the targ...

PT-2026-79648

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: error out for zero quota goal target values Patch series "mm/damon: avoid division by zero from damos quota score". DAMON SAMPLE MTIER and DAMON LRU SORT allow the user to trigger division by zero in damos...

PT-2026-79641

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race between update event fields and, event define fields The following sequence may leads race between event define fields and update event fields: CPU0 loads module A CPU1 loads module B...

Linux Distros Unpatched Vulnerability : CVE-2026-74713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhostiotlb: bound map allocation in addrange vhostiotlbaddrangectx only retires an old entry when the table has a non-zero limit, has exactly reached that limit...

PT-2026-79665

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt nflog: pin the NFLOG backend nf log unregister runs after the per-net teardown so its final RCU grace period also drains readers that obtained the logger from a per-net binding. However, ebt nflog passes an explici...

PT-2026-79554

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description An issue exists in the AllowlistUnpickler component that fails to validate the global name, validating only the pickle module string. This allows attackers to resolve dotted names via attribute travers...

PT-2026-79650

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru sort: error out for 10000 active mem bp damos quota score can trigger division by zero if the target value is zero. DAMON LRU SORT lets users set the target value for the hot memory scheme via active mem bp parameter...

PT-2026-79561

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.9.3 Description The downloader module fails to verify file integrity after downloading packages and before extraction. This allows attackers to use man-in-the-middle attacks or DNS poisoning to inject malicious package...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:3678-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3678-1 advisory. - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. -...

SUSE SLED15 / SLES15 Security Update : sccache (SUSE-SU-2026:3674-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3674-1 advisory. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes...