Linux Distros Unpatched Vulnerability : CVE-2026-64642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using...

RHEL 9 : kpatch-patch (RHSA-2026:47983)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47983 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...

Linux Distros Unpatched Vulnerability : CVE-2026-58159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 throu...

Oracle Solaris Critical Patch Update : jul2026_SRU11_3_36_36_0

The version of Solaris installed on the remote host is prior to 11.3.36.36.0. It is, therefore, affected by a vulnerability as referenced in the solaris11jul2026SRU11336360 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. Supported versions that are...

FreeBSD : Mozilla -- Memory safety bugs (b36c7feb-8aa2-11f1-a744-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b36c7feb-8aa2-11f1-a744-b42e991fc52e advisory. https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/CVE-2026-16412 reports: Memory safety bug...

Fedora 44 : restic (2026-c87cc5b948)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c87cc5b948 advisory. Update to 0.19.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

PT-2026-65719

Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue...

The vulnerability of the ipv4 component in the Linux operating system’s kernel allows attackers to increase their privileges and cause service interruptions.

The vulnerability of the ipv4 component in the Linux operating system’s kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

PT-2026-65911

Name of the Vulnerable Software and Affected Versions OliveTin versions prior to 3000.17.0 Description An issue exists where the 'service/internal/api/api.go' endpoints 'StartActionAndWait' and 'StartActionByGetAndWait' return the full LogEntry output after execution without verifying the logs...

PT-2026-65758

The Apache Traffic Server uri signing and url sig plugins can exhaust the stack or crash on attacker input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, whic...

PT-2026-65777

GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...

PT-2026-65869

Name of the Vulnerable Software and Affected Versions joserfc versions prior to 1.7.2 Description The library accepts JSON Web Tokens JWTs containing trailing padding ==, which does not conform to JSON Object Signing and Encryption JOSE specifications. This results in token malleability, where a...

PT-2026-65895

Name of the Vulnerable Software and Affected Versions Flyto2 Core versions prior to 2.26.7 Description HTTP-emitting modules fetch caller-controlled URLs without using the validate url with env config function, which allows Server-Side Request Forgery SSRF to internal or metadata endpoints. SSRF ...

PT-2026-65814

cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON Compare. When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested docume...

PT-2026-65720

Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host header overflows the stack when redirect following is enabled. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through...

PT-2026-66659

These are all security issues fixed in the rsyslog-8.2606.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-55555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS...

Linux Distros Unpatched Vulnerability : CVE-2026-54605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and servers. From 0.5.5 to 1.1.5, OAuth::Consumertokenrequest parses the raw...

Linux Distros Unpatched Vulnerability : CVE-2026-59943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can...

Linux Distros Unpatched Vulnerability : CVE-2026-67217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in applypatch in cJSONUtils.c. For a replace operation that is missing its value...