Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146128 advisory. MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exectimetracker::getloops/Filesorttracker::reportuse/filesort. Tenable has...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146322 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump operations In net/ieee802154/netlink.c, the legacy...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146336)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146336 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length sctpverifyasconf and sctpverifyparam only valida...

Linux Distros Unpatched Vulnerability : CVE-2026-116723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in FlBMPImage::loadbmp that allows attackers to corrupt stack memory by supplying an...

Linux Distros Unpatched Vulnerability : CVE-2026-112818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - git-annex - None Ubuntu Linux - Unknown description CVE-2026-112818 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2026-115370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pu...

Linux Distros Unpatched Vulnerability : CVE-2026-101753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: RAPID. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146310 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of registerevent in tracemoduleaddevents tracemoduleaddevents ignores...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146321 advisory. In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between eviceinodes and findinode&iput Hi, all Recently I noticed a bug1 in btrfs,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146343)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146343 advisory. In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: reject a flag character as the field delimiter The registration string starts with a...

Linux Distros Unpatched Vulnerability : CVE-2026-99001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/i2c: cancel the client work on remove xei2cnotifier stores the DesignWare adapter in i2c-adapter and schedules i2c-work when the adapter is registered...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2026-146130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146130 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to caus...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146303 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches...

TencentOS Server 4: php (TSSA-2026:1204)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1204 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146317 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the siz...

Linux Distros Unpatched Vulnerability : CVE-2026-99066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 can: remove private CAN skb headroom infrastructure removed the...

Linux Distros Unpatched Vulnerability : CVE-2026-98890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libertas: reject short monitor TX frames In monitor mode, lbshardstartxmit casts skb-data to a radiotap TX header, skips that header, and then copies the...

Linux Distros Unpatched Vulnerability : CVE-2026-115372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.createoptions through volume update, copy,...

RockyLinux 8 : kernel-rt (RLSA-2026:89814)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:89814 advisory. kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CVE-2026-74515 Tenable has extracted the preceding description block directly from...

Linux Distros Unpatched Vulnerability : CVE-2026-98973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/bridge: Fix unlocked listdel in drmbridgeadd When re-adding a bridge that was previously removed, drmbridgeadd drops it from bridgelingeringlist without...

Linux Distros Unpatched Vulnerability : CVE-2026-98987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: look at the topmost mount for a mount namespace file attachrecursivemnt preallocates a mountpoint for the root of the topmost mount of the source so...

Linux Distros Unpatched Vulnerability : CVE-2026-115905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as...

Linux Distros Unpatched Vulnerability : CVE-2026-99075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rustbinder: reschedule node refcount update on thread exit When a thread exits via BINDERTHREADEXIT, its pending work items are cancelled. If a thread exits whi...

SUSE SLES12: openssh8.4 / openssh8.4-clients / openssh8.4-common / etc (SUSE-SU-2026:4907-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4907-1 advisory. - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files bsc1271044. - CVE-2026-59997: sshd:...

Linux Distros Unpatched Vulnerability : CVE-2026-98900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/gntalloc: validate grant count before allocation gntallocioctlalloc allocates the grant-id array before checking whether the requested count fits within the...

Linux Distros Unpatched Vulnerability : CVE-2026-101777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are MySQL...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146256 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146314 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parse...

Linux Distros Unpatched Vulnerability : CVE-2026-104594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive...

PLANET WGS-804HPT and WGS-4215 Missing Authentication for Critical Function (CVE-2025-46275)

PLANET WGS-804HPT V2 and WGS-4215-8P2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146276 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed, need to have a sane check i...

Linux Distros Unpatched Vulnerability : CVE-2026-99055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: reject netiov in zerocopy receive mapping hints After copying a readable prefix, receivefallbacktocopy asks tcpzerocopysethintforskb where page mapping can...

Linux Distros Unpatched Vulnerability : CVE-2026-99064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cipso: adjust cached option offsets when removing CIPSO cipsov4skbuffdelattr removes the CIPSO bytes but does not adjust cached offsets for options that follow...

Linux Distros Unpatched Vulnerability : CVE-2026-114645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an...

Linux Distros Unpatched Vulnerability : CVE-2026-99051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize...

RockyLinux 9 : lrzsz (RLSA-2026:89755)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89755 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via...

Linux Distros Unpatched Vulnerability : CVE-2026-115919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInferenceopset1to6 processes malformed RNN...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146268 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsecdodecryptauth computes t...

RockyLinux 8 : gcc (RLSA-2026:89830)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89830 advisory. gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 gcc: libstdc++ integer overflo...

MiracleLinux 9 : python3.9-3.9.25-7.el9_8.6 (AXSA:2026-2165:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2165:08 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verificatio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146294 advisory. In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates...

Linux Distros Unpatched Vulnerability : CVE-2026-115910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in socialcore/backends/openidconnect.py uses...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2026-146134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146134 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to...

Planet Technology Planet WGS-804HPT Improper Neutralization of Special Elements Used in an OS Command (CVE-2024-52320)

PLANET WGS-804HPT is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1793133822)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793133822 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated...

PLANET IGS-6325-16P4S Improper Validation of Integrity Check Value (CVE-2023-48795)

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...

RockyLinux 10 : skopeo (RLSA-2026:89761)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89761 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Debian dla-4865 : bind9 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4865 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4865-1 [email protected]...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146333)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146333 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via...

Linux Distros Unpatched Vulnerability : CVE-2026-115388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the wasi:io/streams check-write allowance for...