391878 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146312)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146312 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock-sk on the failed-insert path in tipcskcreate When tipcskcreate fails to insert...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146341)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146341 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfeventoutput We received report 1 of kernel crash, which is caused b...
Linux Distros Unpatched Vulnerability : CVE-2026-115586
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtualenv is a tool for creating isolated virtual python environments. From 21.14.9 until 21.14.13, the bash bin/activate script can copy an attacker-controlle...
Linux Distros Unpatched Vulnerability : CVE-2026-98998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove callback This driver stores struct th1520hdmi in...
Mozilla Firefox ESR < 115.44
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.44. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-119 advisory. - Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability wa...
Mozilla Thunderbird < 153.6
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-122 advisory. - Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4,...
Mozilla Thunderbird < 159.0
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 159.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-121 advisory. - Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159...
Planet Technology Planet WGS-804HPT Integer Underflow (CVE-2024-52558)
PLANET WGS-804HPT is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
TencentOS Server 3: php:7.4 (TSSA-2026:1210)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1210 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
SUSE SLES15 Security Update : container-suseconnect (SUSE-SU-2026:4902-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4902-1 advisory. This update for container-suseconnect rebuilds it against the current go security release. Tenable has extracted the preceding description...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146342)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146342 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146117)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146117 advisory. PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after bei...
MiracleLinux 9 : python-urllib3-1.26.5-8.el9_8.2 (AXSA:2026-2170:05)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2170:05 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS...
Fedora 46 : freeipa / krb5 / samba (2026-82cc570aba)
The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-82cc570aba advisory. Update to Samba 4.25.1 along with freeipa rebuild and security fix CVE-2026-11850 in krb5 Tenable has extracted the preceding description block directly from...
RockyLinux 10 : httpd (RLSA-2026:89860)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89860 advisory. httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in modproxyuwsgi CVE-2026-63718 httpd: httpd: Denial of Service via intege...
Linux Distros Unpatched Vulnerability : CVE-2026-98941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 ext4: add checks for large folio incompatibilities when BS PS disables large folios at...
TencentOS Server 3: unbound (TSSA-2026:1211)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1211 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2026-99069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: atiremote2 - fix type confusion in device attribute handlers Previously, the channelmask and modemask attributes were registered on the parent usbdevice...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146279)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146279 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsitcp: Bound SCSI Response data segment to the connection buffer iscsitcphdrdissect...
Mozilla Thunderbird < 153.6
The version of Thunderbird installed on the remote Windows host is prior to 153.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-122 advisory. - Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbir...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146319)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146319 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16...
Linux Distros Unpatched Vulnerability : CVE-2026-116187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows authenticated tenants to manipulate other...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146306)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146306 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p: skip nlink update in cacheless mode to fix WARNON v9fsdeccount unconditionally calls dropnlin...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146271)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146271 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: bound getversion reply decode to front len handlegetversionreply uses msg-frontalloclen ...
Linux Distros Unpatched Vulnerability : CVE-2026-65630
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key through a timing side channel in the pure-Erla...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146293)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146293 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIGIPMULTIPLETABLES is enabled...
Security Update for Microsoft ASP.NET Core (October OOB 2026)
The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute...
AlmaLinux 9.2 [TuxCare] Security Update: guava / guava-javadoc / guava-testlib (ALMALINUX9.2:CLSA-2026:1793106858)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793106858 advisory. - Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1...
TencentOS Server 3: perl-URI (TSSA-2026:1200)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1200 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Linux Distros Unpatched Vulnerability : CVE-2026-115920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.2.1 until 1.22.0, ConvTranspose shape inference processes a...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146347)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146347 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache,...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146125)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146125 advisory. A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service. Tenable has extracte...
Linux Distros Unpatched Vulnerability : CVE-2026-98952
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pfcp: make sure the SEID is linear before reading it pfcpencaprecv only makes sure that the UDP header and the 4 byte PFCP header are in the linear area. When t...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146132)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146132 advisory. zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. Tenable has extracted the preceding...
Linux Distros Unpatched Vulnerability : CVE-2026-79977
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authenticate. In handletransportdata, when the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146257)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146257 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as 1...
Oracle Linux 10 : brotli (ELSA-2026-90449)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90449 advisory. 1.1.0-8.0.1 - Fix out-of-bounds write in the Brotli decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the Oracle Lin...
Linux Distros Unpatched Vulnerability : CVE-2026-98997
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/userq: only accept doorbell BOs as queue doorbell amdgpuuserqgetdoorbellindex pins any BO passed as doorbellhandle into the doorbell domain. For a...
Linux Distros Unpatched Vulnerability : CVE-2026-109089
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow when handling DEVICERESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server. CVE-2026-109089 Note that Nessu...
Linux Distros Unpatched Vulnerability : CVE-2026-115730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl that allows attackers to redirect translation requests by supplying an ns value starting...
Oracle Linux 9 : xdg-dbus-proxy (ELSA-2026-90522)
The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-90522 advisory. 0.1.3-1.1 - Message filtering bypass via reply serial allows sandbox escape CVE-2026-94422 Resolves: RHEL-271548 Tenable has extracted the preceding descriptio...
CentOS Linux 8.5 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1793141203)
The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793141203 advisory. - Sinatra before 2.2.0 does not validate that the expanded path matches publicdir when serving static files. CVE-2022-29970 - Tornad...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146282)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146282 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache wit...
PLANET IGS-5225-8P2T4S Stack-based Buffer Overflow (CVE-2026-81944)
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146278)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146278 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port-pm on uartchangepm Unloading a hardware specific 8250 driver can...
AlmaLinux 8 : thunderbird (ALSA-2026:90913)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:90913 advisory. firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird: Use-after-free i...
Linux Distros Unpatched Vulnerability : CVE-2026-98995
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: reset the old parent's -overmount in mntchangemountpoint umountmnt resets -overmount of the parent when it unmounts the mount that overmounts it...
TencentOS Server 3: postgresql:12 (TSSA-2026:1218)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1218 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2026-98907
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: protect sbwritepointer with invalidate lock sbwritepointer reads the super block from the block device page cache using readcachepagegfp. This has the sa...
Oracle Linux 10 : xdg-dbus-proxy (ELSA-2026-90523)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-90523 advisory. 0.1.5-4.1 - Message filtering bypass via reply serial allows sandbox escape CVE-2026-94422 Resolves: RHEL-271542 Tenable has extracted the preceding descripti...