Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142747 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and...

Amazon Linux 2023 : python3-awscrt (ALAS2023-2026-3280)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3280 advisory. Improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library might allow a remote threat actor operating a server to cause memory corruption on a connecti...

SUSE SLES12: kernel-livepatch-5_14_21-150500_55_144-default / etc (SUSE-SU-2026:4749-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4749-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues: The following security issues were...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142748 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in...

Linux Distros Unpatched Vulnerability : CVE-2026-114732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-host installations. When a user logs in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143065)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143065 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when authchunk is NULL sctpauthchunkverify returns true...

Oracle Linux 10 : php8.4 (ELSA-2026-87071)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87071 advisory. 8.4.27-1 - rebase to 8.4.27 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

SUSE SLES12: libopenssl-1_0_0-devel / libopenssl-1_0_0-devel-32bit / etc (SUSE-SU-2026:4762-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4762-1 advisory. - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: - Security fixes in...

AlmaLinux 8 : perl-DBI:1.641 (ALSA-2026:85916)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:85916 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...

FreeBSD : jackson-databind -- type parameters bypass the polymorphic type validator (8c1b47e2-cf3d-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8c1b47e2-cf3d-11f1-a655-3497f65b111b advisory. The Jackson project reports: Type parameters of generic type ids, and element types of array type ids,...

Linux Distros Unpatched Vulnerability : CVE-2026-111809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer- Encoding. This issue affects Apache Traffic Server: from...

CentOS Linux 8.5 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792622946)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792622946 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143048 advisory. In the Linux kernel, the following vulnerability has been resolved: module: fix eshstrndx.shsize=0 OOB access It is trivial to craft a module to trigger OOB access i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142741 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142766)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142766 advisory. In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum...

RHEL 9 : qemu-kvm (RHSA-2026:88421)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:88421 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143099 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock...

Linux Distros Unpatched Vulnerability : CVE-2026-114726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce resend action...

FreeBSD : p5-DBI -- Prevent dbi_profile crash (23eecf73-cd85-11f1-97dc-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 23eecf73-cd85-11f1-97dc-40b034429ecf advisory. DBI project reports: Prevent dbiprofile crash CVE-2026-108518 Henrik Teichmann. Tenable has extracted t...

Anthropic Claude Code < 2.1.179 Plugin Hash Pinning Bypass (CVE-2026-86063)

The version of Anthropic Claude Code installed on the remote host is prior to 2.1.179. It is, therefore, affected by a hash pinning bypass vulnerability: - The plugin install flow in Claude Code checked out a marketplace's pinned commit SHA using git checkout without verifying that the resulting...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142739 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft AH6 rearranges routing-header addresses before...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143028)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143028 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltechprocessrelpacket Make finger2 and also...

Linux Distros Unpatched Vulnerability : CVE-2026-96639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143059 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix skredir use-after-free in send verdict skpsockmsgverdict takes a socket referen...

Linux Distros Unpatched Vulnerability : CVE-2026-114723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143050 advisory. In the Linux kernel, the following vulnerability has been resolved: mptcp: use OPTIONMPTCPMPJSYNACK in subflowfinishconnect subflowfinishconnect uses four fields...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143039)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143039 advisory. In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field,...

Node.js 26.x < 26.12.1 Multiple Vulnerabilities

The version of Node.js installed on the remote host is prior to 26.12.1. It is, therefore, affected by multiple vulnerabilities as referenced in the Wednesday, October 21, 2026 Security Releases advisory. - The ZipFile implementation returns attacker-controlled prefix bytes after a failed ZIP...

Fedora 46 : python-nh3 / rust-ammonia (2026-938b1c0296)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-938b1c0296 advisory. Update the ammonia crate to version 4.1.8. Rebuild python-nh3 to apply security fixes RUSTSEC-2021-0156, RUSTSEC-2021-0158, RUSTSEC-2026-0373. Tenable has...

CentOS Linux 7 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-devel / etc (CENTOS7:CLSA-2026:1792580871)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792580871 advisory. - A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite an...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:4799-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4799-1 advisory. - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. -...

RHEL 8 : kernel-rt (RHSA-2026:87374)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87374 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Linux Distros Unpatched Vulnerability : CVE-2026-101516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported version...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142743 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header...

Dell Alienware Command Center < 6.14.54.0 Least Privilege Violation (DSA-2026-418)

The version of Dell Alienware Command Center AWCC installed on the remote host is prior to 6.14.54.0. It is, therefore, affected by a least privilege violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileg...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142764 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: use READONCE for dev-driver in devhassyncstate devhassyncstate reads dev-driver twic...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143053 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bondsetupbyslave kernel BUG at net/core/skbuff.c:2306! Oops: inval...

openSUSE 16 Security Update : coredns (openSUSE-SU-2026:22135-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22135-1 advisory. Changes in coredns: - Bump vendored google.golang.org/grpc from 1.83.0 to 1.83.1: CVE-2026-84304: heap memory exhaustion via HTTP/2 DATA frame...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143030 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroyclient releases a client's...

SUSE SLES12: ImageMagick-config-6-SUSE / ImageMagick-config-6-upstream / etc (SUSE-SU-2026:4753-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4753-1 advisory. - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. - CVE-2026-106565: a missing...

Linux Distros Unpatched Vulnerability : CVE-2026-102484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memor...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143047)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143047 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timerpending in reqskqueueunlink. Martin KaFai Lau reported use-after-free 0...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142720 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory...

Rocky Linux 10.2 [CIQ] Security Update: lrzsz / lrzsz-debuginfo / lrzsz-debugsource Multiple Vulnerabilities (crlsa-2026_86056)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686056 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via...

AlmaLinux 8 : kernel-rt (ALSA-2026:87374)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:87374 advisory. kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 Tenable has extracted the preceding...

CentOS Linux 6 [TuxCare] Security Update: gawk Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792508988)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792508988 advisory. - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read...

SUSE SLES15 Security Update : bind (SUSE-SU-2026:4772-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4772-1 advisory. - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. - CVE-2026-19662:...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142485 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads W...

Linux Distros Unpatched Vulnerability : CVE-2026-85557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PowerDNS reports: CVE-2026-85557 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

SUSE SLED15 / SLES15 Security Update : rekor (SUSE-SU-2026:4750-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4750-1 advisory. This update for rekor rebuilds it against the current go security release. Tenable has extracted the preceding...