Linux Distros Unpatched Vulnerability : CVE-2026-72352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: bpf: Fix hidbpfgetdata range check hidbpfgetdata returns a pointer into the HID-BPF context data when the caller-provided offset and size fit inside...

Linux Distros Unpatched Vulnerability : CVE-2026-74323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: Fix possible token leak in mt7996txprepareskb If linkconf or linksta lookup fails in mt7996txprepareskb routine, mt7996 driver leaks an...

Linux Distros Unpatched Vulnerability : CVE-2026-72184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfsnonresidentattrinsertrange...

Linux Distros Unpatched Vulnerability : CVE-2026-72374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each...

Amazon Linux 2 : docker, --advisory ALAS2NITRO-ENCLAVES-2026-116 (ALASNITRO-ENCLAVES-2026-116)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-116 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2058)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2058 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has be...

Fedora 45 : perl-CGI-Session (2026-65aea3d269)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-65aea3d269 advisory. Automatic update for perl-CGI-Session-4.49-1.fc45. Changelog Tue Aug 18 2026 Jitka Plesnikova - 4.49-1 - 4.49 bump rhbz2510691 - Fix CVE-2026-56016 rhbz24958...

Linux Distros Unpatched Vulnerability : CVE-2026-72194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: add depth limit to indxfindbuffer to prevent stack overflow indxfindbuffer recursively descends the B+ tree index with no depth limit. A crafted NTFS...

Linux Distros Unpatched Vulnerability : CVE-2026-72300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: topology: validate vendor array size before parsing sofparsetokensets reads array-size while iterating over topology private data. The loop condition...

Linux Distros Unpatched Vulnerability : CVE-2026-63649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101985)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101985 advisory. In the Linux kernel, the following vulnerability has been resolved: perf: Fix perfeventoverflow vs perfremovefromcontext race Make sure that perfeventoverflow runs...

AlmaLinux 10 : libssh (ALSA-2026:55855)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55855 advisory. libssh: libssh: information disclosure via short GSSAPI Curve25519 public key CVE-2026-59842 libssh: libssh: denial of service via zero advertised chann...

Amazon Linux 2023 : docker (ALAS2023-2026-2062)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2062 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...

IBM HTTP Server 8.5.x / 9.x Web Server Plug-in RCE (7274072)

The version of IBM HTTP Server running on the remote host is affected by multiple vulnerabilities as referenced in the 7274072 advisory. - IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server...

Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2026-139 (ALASDOCKER-2026-139)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-139 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...

GLSA-202608-16 : nginx: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-16 nginx: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in nginx. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

Linux Distros Unpatched Vulnerability : CVE-2026-72006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: free mlx5stidxdata on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak o...

Linux Distros Unpatched Vulnerability : CVE-2026-72285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: TDX: Reject concurrent change to CPUID entry count Reject KVMTDXINITVM if userspace changes cpuid.nent between the initial read and the subsequent copy of...

Linux Distros Unpatched Vulnerability : CVE-2026-74343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kernfs: fix xattr race condition with multiple superblocks Multiple superblocks with differe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099975)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099975 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix listxattr handling when the buffer is full BUG If an OCFS2 inode has both inline and...

RHEL 9 : haproxy (RHSA-2026:55801)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:55801 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haprox...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100885)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100885 advisory. A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, ev...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099711 advisory. In the Linux kernel, the following vulnerability has been resolved: net: macb: use the current queue number for stats There's a potential mismatch between the memory...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099972 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacomhidsetdevicemode wacomhidsetdevicemode currently assumes that t...

Unity Linux 20.1070a Security Update: libpq (UTSA-2026-099550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099550 advisory. Use of inherently dangerous function PQfn..., resultisint=0, ... in PostgreSQL libpq loexport, loread, lolseek64, and lotell64 functions allows the server superuser ...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101086 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100899 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100522)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100522 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accept...

Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099460 advisory. An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. FilteredRelation is subject to SQL injection in column aliases, using a suitab...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100508)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100508 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100919 advisory. A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100297 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq-bio values have been...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100500 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: validate MAP frame length before ingress parsing When ingress deaggregation...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099959)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099959 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets The queue limit check in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100348 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1780: fix PM runtime leak on error path Move pmruntimeputautosuspend before the err...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100939 advisory. Race condition, use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100561 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo ipv6hopjumbo calls pskbtrimrcsum, which can...

RockyLinux 9 : gstreamer1-plugins-good (RLSA-2026:55436)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55436 advisory. gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write CVE-2026-73433...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101157 advisory. Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100388)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100388 advisory. In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache wi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100572)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100572 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100934 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable h...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100168)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100168 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeedlpcenablesnoop devmkasprintf returns NULL when memory...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099940 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: occ Fix division by zero in occshowpower1 In occshowpower1 case 1, the accumulator is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100521 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100520)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100520 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read in broadcast Gap ACK blocks A broadcast PROTOCOL/STATEMSG can carry...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100186 advisory. In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memory...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100136 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role port to Host mode, we observ...

RHEL 10 : gstreamer1-plugins-ugly-free (RHSA-2026:55435)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:55435 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose license is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100099 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapoavx2: fix initial map fill If the first field doesn't cover the entire star...