391878 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146308)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146308 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primarytemp A corrupted osdmap received from a Ceph...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146142)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146142 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter...
Linux Distros Unpatched Vulnerability : CVE-2026-99003
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: validate userspace queue count against initialized firmware slot count In panthordrv.c:panthorioctlgroupcreate, the queue count is validated agains...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146318)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146318 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong loop index The sgcleanup error path used listi...
Linux Distros Unpatched Vulnerability : CVE-2026-116258
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in libimobiledevice up to 1.4.0. This affects an unknown part of the file src/afc.c of the component AFC. Such manipulation leads...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146287)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146287 advisory. In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-zero start sector dm-era tracks writes in...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146146)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146146 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume...
Linux Distros Unpatched Vulnerability : CVE-2026-115927
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked transfer encoding by processing body dat...
SUSE SLES16 Security Update : ca-certificates-mozilla (SUSE-SU-2026:24361-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24361-1 advisory. This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state bsc1286261 Removed: - emSign ECC Root CA - C3 -...
TencentOS Server 3: libxml2 (TSSA-2026:1213)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1213 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
TencentOS Server 4: expat (TSSA-2026:1196)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1196 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2026-116724
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FLTK through 1.4.5 contains an integer overflow vulnerability in FlBMPImage::loadbmp that causes undersized pixel buffer allocation from file-supplied width and...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146121)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146121 advisory. In PHP versions 8.2. before 8.2.32, 8.3. before 8.3.32, 8.4. before 8.4.23, 8.5. before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contain...
AlmaLinux 9 : kernel (ALSA-2026:90365)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:90365 advisory. kernel: udp: Deal with race between UDP socket address change and rehash CVE-2024-57974 kernel: fuse: re-lock request before replacing page cache folio...
Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2026_89083)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689083 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146338)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146338 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146340)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146340 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header...
Oracle Linux 8 : kernel (ELSA-2026-89083)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89083 advisory. - selinux: avoid sksocket dereference in selinuxsctpbindconnect Ondrej Mosnacek RHEL-243220 CVE-2026-72242 - ipv4: validate checksumstart before...
Oracle Linux 8 : brotli (ELSA-2026-90501)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90501 advisory. 1.0.6-5 - Resolves: RHEL-290271 - CVE-2026-111497 brotli: Out-of-Bounds Write in Google Brotli Decoder Tenable has extracted the preceding description block...
SUSE SLES16 Security Update : go1.26 (SUSE-SU-2026:24359-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24359-1 advisory. Update to go 1.26.10 bsc1255111: - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams bsc1284770. -...
Mozilla Firefox ESR < 153.6
The version of Firefox ESR installed on the remote Windows host is prior to 153.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-120 advisory. - Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbir...
Mozilla Firefox < 159.0
The version of Firefox installed on the remote Windows host is prior to 159.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-118 advisory. - Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159. CVE-2026-118008 -...
Mozilla Thunderbird < 159.0
The version of Thunderbird installed on the remote Windows host is prior to 159.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-121 advisory. - Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159. CVE-2026-1180...
Oracle Linux 9 : podman (ELSA-2026-90362)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90362 advisory. - Rebuild for CVE-2026-78667 and CVE-2026-111943 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...
AlmaLinux 9.2 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793132985)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793132985 advisory. - When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an...
Linux Distros Unpatched Vulnerability : CVE-2026-98963
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: always return -EIOCBQUEUED after btrfsuringreadextentendio If all bios finish before btrfsencodedreadregularfillpages returns, it calls...
Linux Distros Unpatched Vulnerability : CVE-2026-98960
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: don't stash iouring encoded data across -EAGAIN Returning -EAGAIN while leaving btrfsuringencodeddata in the cmd PDU leaks if the request is cancelled or...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146298)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146298 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network...
TencentOS Server 3: libxml2 (TSSA-2026:1217)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1217 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146116)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146116 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146311)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146311 advisory. In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdsfindbound looks up the...
Linux Distros Unpatched Vulnerability : CVE-2026-109088
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parsereplycallcallback function in libXtst before 1.2...
Linux Distros Unpatched Vulnerability : CVE-2026-99018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp...
Linux Distros Unpatched Vulnerability : CVE-2026-98920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit 1d78d56c43ef netfs: Fi...
Linux Distros Unpatched Vulnerability : CVE-2026-98997
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/userq: only accept doorbell BOs as queue doorbell amdgpuuserqgetdoorbellindex pins any BO passed as doorbellhandle into the doorbell domain. For a...
Linux Distros Unpatched Vulnerability : CVE-2026-109089
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow when handling DEVICERESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server. CVE-2026-109089 Note that Nessu...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146282)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146282 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache wit...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146344)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146344 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: zero shared page before exposing to userspace bnxtreallocucontext allocates uctx-sh...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146281)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146281 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtwgetwpaie rtwgetwpaie reads bytes at fixed offsets into a...
Linux Distros Unpatched Vulnerability : CVE-2026-99048
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gve: fix napidisable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napidisable and napienable...
SUSE SLES12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2026:4904-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4904-1 advisory. This update for python, python-base, python-doc fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives...
RockyLinux 8 : libX11 (RLSA-2026:89730)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:89730 advisory. libX11: libX11: Heap-based buffer overflow via malicious X server CVE-2026-88806 Tenable has extracted the preceding description block directly from the RockyLin...
CentOS Linux 8.4 [TuxCare] Security Update: cpp / gcc / gcc-c++ / gcc-gdb-plugin / gcc-gfortran / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1793102654)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793102654 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the library...
Fedora 46 : freeipa / krb5 / samba (2026-82cc570aba)
The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-82cc570aba advisory. Update to Samba 4.25.1 along with freeipa rebuild and security fix CVE-2026-11850 in krb5 Tenable has extracted the preceding description block directly from...
Hitachi Energy RTU500 Relative Path Traversal (CVE-2026-8066)
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146337)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146337 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146128)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146128 advisory. MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exectimetracker::getloops/Filesorttracker::reportuse/filesort. Tenable has...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146322)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146322 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump operations In net/ieee802154/netlink.c, the legacy...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146336)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146336 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length sctpverifyasconf and sctpverifyparam only valida...
Linux Distros Unpatched Vulnerability : CVE-2026-116723
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an...