Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_86033)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686033 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143119 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix race between ICReq handling and queue teardown nvmettcphandleicreq updates...

SUSE SLES15 Security Update : kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:4768-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4768-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed:...

Fedora 46 : 3proxy (2026-0d57adddb7)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0d57adddb7 advisory. Automatic update for 3proxy-1.0.1-2.fc46. Changelog Thu Oct 22 2026 Tim Semeijn - 1.0.1-2 - Patch CVE-2026-109438 rhbz2553107, rhbz2553106 Tenable h...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142763 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroyclient releases a client's...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142559)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142559 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142679)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142679 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143031)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143031 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add failure amdmp2registercb stores the platform I2C...

Oracle MySQL Connectors Python (October 2026 CPU)

The versions of MySQL Connectors installed on the remote host are affected by a vulnerability as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. The supported version that is affected is 26.7.0. Easily...

Rocky Linux 9.6 [CIQ] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ciqsa-2026_1658)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261658 advisory. This advisory aggregates security fixes for the php SRPM in CIQ LTS 9.6. It addresses 4 CVEs: CVE-2026-109619, CVE-2026-7568, CVE-2026-109618,...

SUSE SLED15 / SLES15 Security Update : python-oauthlib (SUSE-SU-2026:4807-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4807-1 advisory. This update for python-oauthlib fixes the following issue: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection...

Rocky Linux 10.2 [CIQ] Security Update: librsvg2 / librsvg2-debuginfo / librsvg2-debugsource / etc (crlsa-2026_86841)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202686841 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block direct...

Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-3248)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3248 advisory. Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-109468 Uncontrolled recursion in .NET allows an...

SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:4822-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4822-1 advisory. This update for docker rebuilds it against the current go security release. Tenable has extracted the preceding...

Fedora 43 : perl-ExtUtils-Typemaps-Default (2026-6186a0239f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6186a0239f advisory. - Update to 1.07 - Security fix for CVE-2026-107373 - Security fix for CVE-2026-107794 Tenable has extracted the preceding description block directl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142690 advisory. In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skbudptunnelsegment gets the UDP header...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142529 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143078 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory...

RockyLinux 8 : php:8.2 (RLSA-2026:87073)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:87073 advisory. php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142471 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...

RHEL 9 : kernel (RHSA-2026:87805)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87805 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netlabel: Fix NULL pointer...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143108)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143108 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143121 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcpv6synrecvsock Code in tcpv6synrecvsock after the call to...

RHEL 10 : expat (RHSA-2026:88248)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88248 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc...

RHEL 9 : kernel-rt (RHSA-2026:87822)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:87822 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements...

Linux Distros Unpatched Vulnerability : CVE-2026-114042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength ...

AlmaLinux 10 : php (ALSA-2026:87070)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:87070 advisory. php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and...

Linux Distros Unpatched Vulnerability : CVE-2026-114719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143044 advisory. A time-of-check to time-of-use issue exists in iouring subsystem's IORINGOPCLOSE operation in the Linux kernel's versions 5.6 - 5.11 inclusive, which allows a local...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142689 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPHMSGMONMAP contains a monm...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142735)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142735 advisory. In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks...

Linux Distros Unpatched Vulnerability : CVE-2026-96641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/imaging.c checks positive glyph advances against INTMAX but does not...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142496 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dadfailure when state is no longer POSTDAD addrconfdadfailure...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142553 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: validate offshift to prevent shift-out-of-bounds u32change copies the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142695)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142695 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock-sk on the failed-insert path in tipcskcreate When tipcskcreate fails to insert...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142685 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pmgenpdremove before freeing genpd Call pmgenpdremove to unregister from globa...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143098 advisory. In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist...

openSUSE 16 Security Update : putty (openSUSE-SU-2026:22127-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22127-1 advisory. Changes in putty: - Update to release 0.85 Fixed a remotely triggerable use-after-free in Pageant. Fixed a remotely triggerable buffer overflow ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143082 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports...

SUSE SLES15 Security Update : kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:4748-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4748-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed:...

Rocky Linux 9 [CIQ] Security Update: qt5-qtbase / qt5-qtbase-common / qt5-qtbase-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_87082)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687082 advisory. qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization CVE-2026-11573 qt5-qtbase: qt6-qtbase: Qt: Denia...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142480 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvecrxcompleted In nvecrxcompleted, when an incomplete RX...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142731 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143096 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call ntfsbadinode when failing to rename It is safe to call ntfsbadinode on live inodes...

Fortinet Fortigate 7.2.0 < 7.2.14 / 7.4.0 < 7.4.13 / 7.6.0 < 7.6.8 / 8.0.0 < 8.0.2 Multiple Vulnerabilities

The version of FortiOS installed on the remote host is 7.2.x prior to 7.2.14, 7.4.x prior to 7.4.13, 7.6.x prior to 7.6.8, or 8.0.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the Fortinet security hardening release announcement. Fortinet states that th...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142512)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142512 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: skip hash tables in u32bindclass u32walk enumerates both struct tcuhnode and...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142680)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142680 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfreercu and rcuassignpointer Sashiko pointed out that kfreercu wa...

IBM MQ 9.4.5.0 - 9.4.5.1 CD < 10.0.0.0 (7290859)

The version of IBM MQ installed on the remote host is 9.4.5.0 through 9.4.5.1 CD. It is, therefore, affected by a vulnerability as referenced in the 7290859 advisory. - IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143085 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta...

AlmaLinux 9.6 [TuxCare] Security Update: mod_auth_openidc (ALMALINUX9.6:CLSA-2026:1792634626)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792634626 advisory. - modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID...