Plex Media Server < 1.43.3.10861 Multiple Vulnerabilities

According to its self-reported version, the Plex Media Server installed on the remote host is prior to 1.43.3.10861. It is, therefore, affected by multiple vulnerabilities: - Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The...

Oracle Linux 9 : postgresql:16 (ELSA-2026-85791)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-85791 advisory. - Fixes CVE-2026-103484 out-of-bounds write during IVFFlat index build, which could lead to arbitrary code execution - Fix CVE-2026-73515 - Fix CVE-2026-73515 ...

AlmaLinux 9.2 [TuxCare] Security Update: compat-openssl11 (ALMALINUX9.2:CLSA-2026:1792496065)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792496065 advisory. - Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD...

AlmaLinux 9.2 [TuxCare] Security Update: mod_auth_openidc (ALMALINUX9.2:CLSA-2026:1791839568)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791839568 advisory. - modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID...

RHEL 9 : postgresql:18 (RHSA-2026:85814)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:85814 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: pgvector: pgvector: Arbitrary code execution via...

Fedora 46 : libmodplug (2026-6c58236667)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6c58236667 advisory. Automatic update for libmodplug-0.8.9.0-31.fc46. Changelog Tue Oct 20 2026 Karel Voln - 1:0.8.9.0-31 - Fix CVE-2026-75904, OOB read in patsmplooped...

Linux Distros Unpatched Vulnerability : CVE-2026-98844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: clear post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole created after the EOF by an ordinary write if dirty da...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45991)

In the Linux kernel, the following vulnerability has been resolved: udf: fix partition descriptor append bookkeeping Mounting a crafted UDF image with repeated partition descriptors can trigger a heap out-of-bounds write in partdescsloc. handlepartitiondescriptor deduplicates entries by partition...

AlmaLinux 9 : flatpak (ALSA-2026:80497)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80497 advisory. flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data...

Oracle Linux 8 : flatpak (ELSA-2026-80687)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80687 advisory. - Use gsize for OCI delta sizes and harden delta parser CVE-2026-96280 Resolves: RHEL-271507 - Avoid symlink path traversal in revokefs writer...

PT-2026-118239

UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service DoS condition...

kernel security, bug fix, and enhancement update

5.14.0-687.59.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

AlmaLinux 9.2 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.2:CLSA-2026:1791819150)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791819150 advisory. - In Flatpak before 1.18.1, a malicious sandboxed app can replace /.var/app/$appid/.ld.so with a symlink, causing regenerateldcache to write...

RHEL 9 : flatpak (RHSA-2026:80497)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80497 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak:...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-2010:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2010:01 advisory. perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder CVE-2026-73194 Tenable has extracted the preceding description block...

Oracle Linux 9 : flatpak (ELSA-2026-80497)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80497 advisory. - Use gsize for OCI delta sizes and harden delta parser CVE-2026-96280 Resolves: RHEL-271518 - Avoid symlink path traversal in revokefs writer...

Linux Distros Unpatched Vulnerability : CVE-2026-98776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binderfs: fix UAF write in binderadddevice binderfsbinderdevicecreate publishes the new dentry with dmakepersistent and then calls simpledonecreating, which dro...

Siemens SIMATIC S7-1500 TM MFP Out-of-bounds Write (CVE-2026-46195)

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate dacloffset before building DACL pointers parsesecdesc, buildsecdesc, and the chown path in idmodetocifsacl all add the server-supplied dacloffset to pntsd before proving a DACL header fits inside the returne...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31705)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2getea EA alignment smb2getea applies 4-byte alignment padding via memset after writing each EA entry. The bounds check on buffreelen is performed before the value memcpy, but the alignment...

CVE-2026-98546

A flaw was found in the Linux kernel's ARM64 architecture support. When user-space access to performance monitoring counters is enabled, write traps for a write-only performance register are improperly configured during hypervisor initialization. A local user can exploit this vulnerability by...