Linux Distros Unpatched Vulnerability : CVE-2026-114728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcubewashtml...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142558)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142558 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: clear sockops cb flags before force-closing a child socket A child socket inherits the...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142509)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142509 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix authhmacs array size in struct sctpcookie The authhmacs array in struct sctpcookie is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142765 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that th...

Linux Distros Unpatched Vulnerability : CVE-2025-31699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but never fully...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142533 advisory. In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlangropreparereceive. udptunnelsockrelease could set...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142705 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 apparmor: share profile nam...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143070 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792627161)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792627161 advisory. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142528 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid touching renamed directory if parent does not change The VFS will not be locking mov...

RHEL 9 : php:8.2 (RHSA-2026:87072)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87072 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via...

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792591590)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792591590 advisory. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName...

Linux Distros Unpatched Vulnerability : CVE-2026-114727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as val...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143086 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure -ioerrwork is cancelled in nvmefcdeletectrl nvmefcdeleteassocation waits fo...

Palo Alto GlobalProtect App MacOS 6.2.x < 6.2.8-h15 / 6.3.x < 6.3.3-h16 Local Privilege Escalation (CVE-2026-0315)

The version of Palo Alto GlobalProtect App installed on the remote macOS host is 6.2.x prior to 6.2.8-h15, or 6.3.x prior to 6.3.3-h16. It is, therefore, affected by a local privilege escalation vulnerability: - A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect ap...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142531 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummyhcd: prevent fiforeq reuse during giveback dummyhcd embeds a single shared...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143084 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctpprocessasconf caches the...

Oracle Linux 9 : librsvg2 (ELSA-2026-86921)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-86921 advisory. 2.50.7-3.1 - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities entities Tenable has extracted the preceding description block...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142564 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143094 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 vsock/virtio: stop...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143116)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143116 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142530 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix a...

Citrix Workspace App for Windows Out-of-bounds Read and Write (CVE-2026-84420) (CTX697181)

The version of Citrix Workspace App for Windows installed on the remote host is 2507.1 LTSR prior to 2507.1 LTSR CU3, or Current Release prior to 2603.20. It is, therefore, affected by an out-of-bounds read and out-of-bounds write vulnerability as referenced in the CTX697181 advisory. -...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142711 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142730)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142730 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with...

Rocky Linux 8 [CIQ] Security Update: perl-DBI / perl-DBI-debuginfo / perl-DBI-debugsource (crlsa-2026_85916)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685916 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142478 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix potential kgdmem UAFs kgdmem pointers returned by kfdprocessdevicetranslatehandle...

Rocky Linux 10.2 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (crlsa-2026_85308)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685308 advisory. bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 Tenable has extracted the preceding description bloc...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3250)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3250 advisory. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188...

Fortinet FortiManager 7.2.0 < 7.2.13 / 7.4.0 < 7.4.12 / 7.6.0 < 7.6.8 / 8.0.0 < 8.0.2 Multiple Vulnerabilities

The version of FortiManager installed on the remote host is 7.2.x prior to 7.2.13, 7.4.x prior to 7.4.12, 7.6.x prior to 7.6.8, or 8.0.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the Fortinet security hardening release announcement. Fortinet states th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142751 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapoavx2: don't return non-matching entry on expiry New test case fails...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-good Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792533291)

The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792533291 advisory. - GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142514 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEMCREATE domain combinations AMDGPUGEMCREATE checked domain bits against...

Linux Distros Unpatched Vulnerability : CVE-2026-114716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail::extractinlineimages used the media...

RHEL 9 : php (RHSA-2026:87151)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87151 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via...

RHEL 8 : grafana-pcp (RHSA-2026:88394)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:88394 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

Oracle NoSQL Database (October 2026 CPU)

The versions of Oracle NoSQL Database installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in Oracle NoSQL Database component: Administration Netty. Supported versions that are affected are 23.3.41, 24.4.14 and...

RHEL 10 : buildah (RHSA-2026:88262)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88262 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...

Linux Distros Unpatched Vulnerability : CVE-2026-114720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote authenticated attacker can exploit this...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143080 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143097 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix socket use-after-free during link group termination smclgrterminate drops connslock...

Rocky Linux 10.2 [CIQ] Security Update: fetchmail / fetchmail-debuginfo / fetchmail-debugsource (crlsa-2026_85959)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685959 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description blo...

CentOS Linux 7 [TuxCare] Security Update: rsync (CENTOS7:CLSA-2026:1792582985)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792582985 advisory. - rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142551 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421hubcontrol The max3421hubcontrol function...

Linux Distros Unpatched Vulnerability : CVE-2026-96636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek and DcxImageFile.seek reparse later MPO or DCX frames and replace self.size without...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143106 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: check for zero length in DecodeQ931 In DecodeQ931, the UserUserIE cod...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142542)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142542 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721dbdpc With a listforeach loop, if we don't fin...

Rocky Linux 9 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (crlsa-2026_85309)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685309 advisory. bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-91403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions tha...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142520)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142520 advisory. In the Linux kernel, the following vulnerability has been resolved: net: remove CAPSYSRAWIO zero-padding in devvalidateheader devvalidateheader reads...