Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : NSS update (USN-8947-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8947-1 advisory. This update removes the emSign ECC Root CA - G3 and Comodo AAA Services root CA...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142472 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143036)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143036 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: fix hanging cephgetcaps with stale mdswanted A reader can hang forever in cephgetcaps when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142681 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltechprocessrelpacket Make finger2 and also...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142514 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate GEMCREATE domain combinations AMDGPUGEMCREATE checked domain bits against...

Rocky Linux 9 [CIQ] Security Update: apcu-panel / php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_87072)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687072 advisory. php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and R...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142478 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix potential kgdmem UAFs kgdmem pointers returned by kfdprocessdevicetranslatehandle...

Rocky Linux 8 [CIQ] Security Update: perl-DBI / perl-DBI-debuginfo / perl-DBI-debugsource (crlsa-2026_85916)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685916 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142730)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142730 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with...

Linux Distros Unpatched Vulnerability : CVE-2026-102486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and...

Rocky Linux 8 [CIQ] Security Update: bubblewrap / bubblewrap-debuginfo / bubblewrap-debugsource (crlsa-2026_85306)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685306 advisory. bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup CVE-2026-87766 Tenable has extracted the preceding description block...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142497)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142497 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data The OSS sequencer processes t...

Oracle Linux 10 : podman (ELSA-2026-88202)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-88202 advisory. 5.8.2-10.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.8.2-10 - update to the latest upstream commit bd9083e0 -...

Linux Distros Unpatched Vulnerability : CVE-2026-114716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmailsendmail::extractinlineimages used the media...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142488 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET...

Citrix Workspace App for Windows Out-of-bounds Read and Write (CVE-2026-84420) (CTX697181)

The version of Citrix Workspace App for Windows installed on the remote host is 2507.1 LTSR prior to 2507.1 LTSR CU3, or Current Release prior to 2603.20. It is, therefore, affected by an out-of-bounds read and out-of-bounds write vulnerability as referenced in the CTX697181 advisory. -...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143056)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143056 advisory. In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143034 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001requestmsix unwinds previously...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142545)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142545 advisory. In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the...

RHEL 8 : flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac (RHSA-2026:88164)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88164 advisory. SAC is a standard interface for CSS parsers, intended to work with CSS1, CSS2, CSS3 and other CSS derived languages. Security Fixes:...

Linux Distros Unpatched Vulnerability : CVE-2026-94140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote...

Rocky Linux 10.2 [CIQ] Security Update: php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_87070)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687070 advisory. php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption an...

Citrix XenServer 8.4.x / 9.x Multiple Vulnerabilities (CTX697170)

The version of Citrix XenServer installed on the remote host is 8.4.x or 9.x. It is, therefore, affected by multiple vulnerabilities as referenced in the CTX697170 advisory: - A grant table race on a v2 - v1 - v2 version change may allow a privileged user in a guest VM to compromise or crash the...

RHEL 8 : grafana-pcp (RHSA-2026:88394)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:88394 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142751 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapoavx2: don't return non-matching entry on expiry New test case fails...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143092 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: Wh...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142477)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142477 advisory. In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tprecv runs in the...

Oracle Linux 9 : php (ELSA-2026-87151)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87151 advisory. - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire...

AlmaLinux 9 : jackson-core (ALSA-2026:86706)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:86706 advisory. com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking CVE-2026-89407...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142759 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blkrqpayloadbytes alone Commit 25e5cb780e62 nvme-tcp: fi...

Linux Distros Unpatched Vulnerability : CVE-2026-111808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded HTTP/2 DATA frame. This issue affects Apache Traffic Server...

CentOS Linux 7 [TuxCare] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792536927)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792536927 advisory. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handle...

SUSE SLES15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-bdb / etc (SUSE-SU-2026:4802-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4802-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142746)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142746 advisory. In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pcidev LUT The PF SR-IOV enable path caches VF pcidev pointers in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142674 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721dbdpc With a listforeach loop, if we don't fin...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142494 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption The rtime decompression routine does not fully...

Linux Distros Unpatched Vulnerability : CVE-2026-94482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted requests targeting App Router applications...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143064 advisory. In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142475)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142475 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was...

Oracle MySQL Cluster 26.x.x < 26.10.0 (October 2026 CPU)

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Compiling OpenSSL. Supported versions that are affected...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143081 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the...

Linux Distros Unpatched Vulnerability : CVE-2026-83381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1...

Linux Distros Unpatched Vulnerability : CVE-2026-111817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed proxy.config.http.dropchunkedtrailers until the connection...

RHEL 10 : iperf3 (RHSA-2026:88207)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:88207 advisory. Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter,...

RHEL 8 : sudo (RHSA-2026:87026)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:87026 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142543 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142470 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: altera-msgdma: properly free descriptor in msgdmafreedescriptor Remove listdel call in...

Linux Distros Unpatched Vulnerability : CVE-2026-114437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct...

Rocky Linux 8 [CIQ] Security Update: librsvg2 / librsvg2-debuginfo / librsvg2-debugsource / etc (crlsa-2026_86842)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202686842 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block directly...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon (ALMALINUX9.2:CLSA-2026:1792659934)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792659934 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that...