Photon OS 5.0: Linux PHSA-2026-5.0-90-0770

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0770. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin: IBM Storage Protect Data Protection for Virtual Environments' WebSphere Application Server Liberty is affected by a security bypass issue (CVE-2026-5516)

Summary IBM Storage Protect Data Protection for Virtual Environments uses IBM WebSphere Application Server Liberty as part of its web application runtime. The WebSphere Application Server Liberty is affected by a security bypass issue. This issue has been addressed in this release. Vulnerability...

Security Bulletin: IBM Storage Protect Data Protection for Virtual Environments' WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVE-2026-4410)

Summary IBM Storage Protect Data Protection for Virtual Environments uses IBM WebSphere Application Server Liberty as part of its web application runtime. The WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service. This issue has been addressed i...

Security Bulletin: IBM Storage Protect Data Protection for Virtual Environments uses WebSphere Application Server Liberty, which is vulnerable to cross-site scripting (CVE-2025-12635)

Summary IBM Storage Protect Data Protection for Virtual Environments uses IBM WebSphere Application Server Liberty as part of its web application runtime. The WebSphere Application Server Liberty is vulnerable to cross-site scripting. This issue has been addressed in this release. Vulnerability...

Virtuozzo Infrastructure 7.4 Hotfix 1 (7.4.0-75)

This update provides stability fixes. Vulnerability id: VSTOR-102068, VSTOR-102069, VSTOR-138302 Creating a VM in a server group could fail with "No valid host found" because a previously canceled or failed VM remained in the server group. Vulnerability id: VSTOR-120923 VPN could stop working whe...

Security Bulletin: IBM Storage Protect Client and Virtual Environments are vulnerable to privilege escalation due to IBM WebSphere Application Server Liberty (CVE-2025-14915)

Summary IBM Storage Protect Client and Virtual Environments use IBM WebSphere Application Server Liberty as part of its web application runtime. A privilege escalation vulnerability in IBM WebSphere Application Server Liberty, when the restConnector-1.0 or restConnector-2.0 feature is enabled,...

GHSA-F4WG-8884-3QG5 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-vmware, linux-qemu...

GHSA-JXR7-X2HM-5G42 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-vmware, linux-qemu...

CVE-2026-53392 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-vmware, linux-qemu, linux-gcp...

GHSA-3GFH-MQ5V-C264 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-vmware, linux-qemu, linux-gcp...

CVE-2026-53399 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-vmware, linux-qemu...

CVE-2026-53402 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-gcp, linux-vmware, linux-qemu...

Photon OS 5.0: Openssh PHSA-2026-5.0-0936

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0936. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libsolv PHSA-2026-5.0-0935

An update of the libsolv package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0935. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin: IBM Storage Protect Client and Virtual Environments are affected by an identity spoofing vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-3621)

Summary IBM Storage Protect Client and Virtual Environments use IBM WebSphere Application Server Liberty as part of its web application runtime. Under limited conditions, when an application is deployed without authentication and authorization configured, IBM WebSphere Application Server Liberty ...

CVE-2026-41709

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged...

CVE-2026-59310

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code...

CVE-2026-59309

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system...

CVE-2026-47876

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are no...

CVE-2026-41703

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service DoS condition of the host process. On Workstation...