Oracle Linux 8 : flatpak (ELSA-2026-80687)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-80687 advisory. - Use gsize for OCI delta sizes and harden delta parser CVE-2026-96280 Resolves: RHEL-271507 - Avoid symlink path traversal in revokefs writer...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-2010:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2010:01 advisory. perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder CVE-2026-73194 Tenable has extracted the preceding description block...

PT-2026-120299

Summary A PPM or PGM file can declare a width of 0, which Pillow accepts, producing an image of size 0, N. Passing that image to ImageMorph.MorphOp.apply makes the native morphology code index a row buffer at outrowwidth - 1, which is outrow-1 when the width is 0. The process crashes. Details The...

Linux Distros Unpatched Vulnerability : CVE-2026-110680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encodehv. With...

Linux Distros Unpatched Vulnerability : CVE-2026-98776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binderfs: fix UAF write in binderadddevice binderfsbinderdevicecreate publishes the new dentry with dmakepersistent and then calls simpledonecreating, which dro...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31705)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2getea EA alignment smb2getea applies 4-byte alignment padding via memset after writing each EA entry. The bounds check on buffreelen is performed before the value memcpy, but the alignment...

AlmaLinux 9 : tftp (ALSA-2026:80663)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:80663 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly fr...

CentOS Linux 6 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ssl (CENTOS6:CLSA-2026:1791293022)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1791293022 advisory. - Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

HMS Networks PEAK-System Device Driver Setup buffer error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain a buffer error vulnerability. This vulnerability arises when the parser processes malformed records; after a record is deemed invalid, the...

Google Chrome Vulnerability: CVE-2026-113300

Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-120142

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description An unauthenticated user can perform an arbitrary write into the shared Redis instance under any tenant's key. This issue breaks the credential-encryption boundary of the platform,...

PT-2026-118412

gx binres pixelmap table load in the GUIX binary resource theme loader indexes the pixelmap table with a value read verbatim from the resource file and never bounds it against the table size. A crafted theme drives a write of up to roughly 256 KB past the end of the table. The overflowed buffer i...

PT-2026-118595

Name of the Vulnerable Software and Affected Versions Acrobat for Edge versions prior to 154.0.4258.48 Description An out-of-bounds write issue exists that could allow arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user...

PT-2026-118336

uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume records that ft find resumeable loads...

PT-2026-118370

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FX MEDIA driver callback, giving control of the instruction...

Linux Distros Unpatched Vulnerability : CVE-2026-98673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort befo...

Linux Distros Unpatched Vulnerability : CVE-2026-70197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70197 Note that Nessus relies on the presence of the packag...

CentOS Linux 7 [TuxCare] Security Update: python3 / python3-debug / python3-devel / python3-idle / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791896121)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791896121 advisory. - tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored...

Siemens SIMATIC S7-1500 TM MFP Missing Release of Resource after Effective Lifetime (CVE-2025-68239)

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access before closing files opened by openexec bmregisterwrite opens an executable file using openexec, which internally calls doopenexecat and denies write access on the file to avoid modification while...

AlmaLinux 9 : pcre2 (ALSA-2026:81532)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:81532 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 PCRE2: PCRE2: Out-of-bounds read via...