EulerOS Virtualization 2.15.1 : vim (EulerOS-SA-2026-4680)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob...

Linux Distros Unpatched Vulnerability : CVE-2026-122328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw of src/decoderwav.c when decoding A-law or mu-law WAV files...

EulerOS Virtualization 2.15.1 : openssl (EulerOS-SA-2026-4567)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1TYPE union member is...

EulerOS Virtualization 2.15.0 : bind (EulerOS-SA-2026-4806)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which...

EulerOS Virtualization 2.15.0 : grub2 (EulerOS-SA-2026-4598)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closin...

EulerOS Virtualization 2.15.1 : dracut (EulerOS-SA-2026-4753)

According to the versions of the dracut packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted...

EulerOS Virtualization 2.15.1 : libssh2 (EulerOS-SA-2026-4649)

According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the fi...

EulerOS Virtualization 2.15.1 : python-pip (EulerOS-SA-2026-4787)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

EulerOS Virtualization 2.15.1 : dhcp (EulerOS-SA-2026-4548)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into...

EulerOS Virtualization 2.15.1 : libssh (EulerOS-SA-2026-4562)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A path traversal vulnerability exists in libssh when processing paths received from SCP servers. Attackers can bypass security...

EulerOS Virtualization 2.15.0 : krb5 (EulerOS-SA-2026-4699)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls...

EulerOS Virtualization 2.15.1 : httpd (EulerOS-SA-2026-4760)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.Users are...

EulerOS Virtualization 2.15.0 : curl (EulerOS-SA-2026-4589)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When doing TLS related transfers with reused easy or multi handles and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl could...

EulerOS Virtualization 2.15.0 : cifs-utils (EulerOS-SA-2026-4808)

According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before lookin...

EulerOS Virtualization 2.15.0 : nghttp2 (EulerOS-SA-2026-4713)

According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops...

EulerOS Virtualization 2.15.1 : qemu (EulerOS-SA-2026-4791)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the...

EulerOS Virtualization 2.15.0 : libarchive (EulerOS-SA-2026-4821)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

EulerOS Virtualization 2.15.1 : libtiff (EulerOS-SA-2026-4765)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : 'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in...

EulerOS Virtualization 2.15.1 : unbound (EulerOS-SA-2026-4678)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain condition...

EulerOS Virtualization 2.15.1 : nfs-utils (EulerOS-SA-2026-4770)

According to the versions of the nfs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client t...

Linux Distros Unpatched Vulnerability : CVE-2026-72814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom...

EulerOS Virtualization 2.15.0 : sqlite (EulerOS-SA-2026-4732)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attacke...

EulerOS Virtualization 2.15.0 : gcc (EulerOS-SA-2026-4693)

According to the versions of the gcc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangleconst, as demonstrated by nm-new.CVE-2022-27943 Tenable...

EulerOS Virtualization 2.15.1 : util-linux (EulerOS-SA-2026-4679)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check- Time-of-Use vulnerabilit...

EulerOS Virtualization 2.15.1 : haveged (EulerOS-SA-2026-4638)

According to the versions of the haveged package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...

EulerOS Virtualization 2.15.0 : python-cryptography (EulerOS-SA-2026-4720)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5...

EulerOS Virtualization 2.15.0 : binutils (EulerOS-SA-2026-4588)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort SIGABRT when processing a crafted ELF binary with...

EulerOS Virtualization 2.15.1 : util-linux (EulerOS-SA-2026-4799)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and...

Linux Distros Unpatched Vulnerability : CVE-2026-120423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client for Node.js. In versions 7.15.0 through 7.30.1 and 8.0.0 through 8.12.3, fetch verifies Subresource Integrity metadata by splitting the...

EulerOS Virtualization 2.15.0 : qemu (EulerOS-SA-2026-4740)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in QEMU Virtualization Software the affected version unknown. It has been declared as critical.The CWE...

EulerOS Virtualization 2.15.1 : python-ply (EulerOS-SA-2026-4666)

According to the versions of the python-ply package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

EulerOS Virtualization 2.15.1 : nghttp2 (EulerOS-SA-2026-4771)

According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content- Length header and body ont...

EulerOS Virtualization 2.15.1 : libarchive (EulerOS-SA-2026-4558)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when...

EulerOS Virtualization 2.15.0 : lcms2 (EulerOS-SA-2026-4700)

According to the versions of the lcms2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

Linux Distros Unpatched Vulnerability : CVE-2026-120415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, the redirect interceptor strips sensitive headers such as...

Linux Distros Unpatched Vulnerability : CVE-2026-116592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client for Node.js. In versions 7.30.1 and 8.12.2 through 8.12.3, when an originless Agent composes the redirect and shared cache interceptors...

EulerOS Virtualization 2.15.0 : binutils (EulerOS-SA-2026-4687)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and...

EulerOS Virtualization 2.15.0 : policycoreutils (EulerOS-SA-2026-4842)

According to the versions of the policycoreutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : 'Hello,\n\nOn Wed, Jul 15, 2026 at 12:48:22PM +0200, Matthias Gerstner wrote:', '5 CVE Assignments\n==================\n\n...

EulerOS Virtualization 2.15.0 : radvd (EulerOS-SA-2026-4851)

According to the versions of the radvd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buff...

EulerOS Virtualization 2.15.0 : python-paramiko (EulerOS-SA-2026-4844)

According to the versions of the python-paramiko package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

EulerOS Virtualization 2.15.1 : glibc (EulerOS-SA-2026-4553)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interfa...

EulerOS Virtualization 2.15.0 : nfs-utils (EulerOS-SA-2026-4829)

According to the versions of the nfs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client t...

EulerOS Virtualization 2.15.0 : python-ply (EulerOS-SA-2026-4724)

According to the versions of the python-ply package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

EulerOS Virtualization 2.15.0 : python-pillow (EulerOS-SA-2026-4722)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount,...

EulerOS Virtualization 2.15.0 : perl-HTTP-Tiny (EulerOS-SA-2026-4839)

According to the versions of the perl-HTTP-Tiny package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets.When the server return...

EulerOS Virtualization 2.15.0 : gnutls (EulerOS-SA-2026-4817)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that...

Linux Distros Unpatched Vulnerability : CVE-2026-122329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw in src/decoderaiff.c due to miscalculated output offsets when expanding A-law o...

EulerOS Virtualization 2.15.0 : glibc (EulerOS-SA-2026-4694)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single...

EulerOS Virtualization 2.15.0 : libgcrypt (EulerOS-SA-2026-4704)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to...

EulerOS Virtualization 2.15.0 : mod_http2 (EulerOS-SA-2026-4827)

According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious...