Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_86195)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686195 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service...

TencentOS Server 3: gimp:2.8 (TSSA-2026:1195)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1195 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142547 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142739 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft AH6 rearranges routing-header addresses before...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143099 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock...

Linux Distros Unpatched Vulnerability : CVE-2026-101516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported version...

SUSE SLES12: kernel-livepatch-5_14_21-150500_55_144-default / etc (SUSE-SU-2026:4749-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4749-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues: The following security issues were...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142496 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dadfailure when state is no longer POSTDAD addrconfdadfailure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143035)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143035 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdrbuftrim: clamp buf-len to avoid underflow xdrbuftrim trims len bytes from the tail of...

Linux Distros Unpatched Vulnerability : CVE-2026-91382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142546 advisory. In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3simplefallocaterange can skip...

Linux Distros Unpatched Vulnerability : CVE-2026-111809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer- Encoding. This issue affects Apache Traffic Server: from...

SUSE SLES12: libopenssl-1_0_0-devel / libopenssl-1_0_0-devel-32bit / etc (SUSE-SU-2026:4762-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4762-1 advisory. - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: - Security fixes in...

Linux Distros Unpatched Vulnerability : CVE-2026-114723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcubeimage falls...

Node.js 26.x < 26.12.1 Multiple Vulnerabilities

The version of Node.js installed on the remote host is prior to 26.12.1. It is, therefore, affected by multiple vulnerabilities as referenced in the Wednesday, October 21, 2026 Security Releases advisory. - The ZipFile implementation returns attacker-controlled prefix bytes after a failed ZIP...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142748 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142529 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143039)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143039 advisory. In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143108)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143108 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143047)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143047 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timerpending in reqskqueueunlink. Martin KaFai Lau reported use-after-free 0...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142766)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142766 advisory. In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142741 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143109)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143109 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143028)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143028 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltechprocessrelpacket Make finger2 and also...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143065)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143065 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when authchunk is NULL sctpauthchunkverify returns true...

AlmaLinux 8 : kernel-rt (ALSA-2026:87374)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:87374 advisory. kernel: ipv4: raw: reject IPHDRINCL packets with ihl msiperm after freeing it on init failure CVE-2026-89777 Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_86193)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686193 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service...

Linux Distros Unpatched Vulnerability : CVE-2026-114732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-host installations. When a user logs in...

Linux Distros Unpatched Vulnerability : CVE-2026-114726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce resend action...

Anthropic Claude Code < 2.1.179 Plugin Hash Pinning Bypass (CVE-2026-86063)

The version of Anthropic Claude Code installed on the remote host is prior to 2.1.179. It is, therefore, affected by a hash pinning bypass vulnerability: - The plugin install flow in Claude Code checked out a marketplace's pinned commit SHA using git checkout without verifying that the resulting...

CentOS Linux 8.5 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792622946)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792622946 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143048 advisory. In the Linux kernel, the following vulnerability has been resolved: module: fix eshstrndx.shsize=0 OOB access It is trivial to craft a module to trigger OOB access i...

RHEL 9 : qemu-kvm (RHSA-2026:88421)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:88421 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:4799-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4799-1 advisory. - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. -...

Node.js 24.x < 24.22.1 / 26.x < 26.12.1 TLS Certificate Hostname Bypass

The version of Node.js installed on the remote host is 24.x prior to 24.22.1 or 26.x prior to 26.12.1. It is, therefore, affected by a TLS certificate hostname bypass vulnerability as referenced in the Wednesday, October 21, 2026 Security Releases advisory. - TLS certificate hostname verification...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143030 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent lock owner use-after-free during client teardown destroyclient releases a client's...

IBM MQ 9.4.5.0 - 9.4.5.1 CD < 10.0.0.0 (7290859)

The version of IBM MQ installed on the remote host is 9.4.5.0 through 9.4.5.1 CD. It is, therefore, affected by a vulnerability as referenced in the 7290859 advisory. - IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143085 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143053 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bondsetupbyslave kernel BUG at net/core/skbuff.c:2306! Oops: inval...

FreeBSD : jackson-databind -- denial of service (7b3ea5d6-cf3d-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7b3ea5d6-cf3d-11f1-a655-3497f65b111b advisory. The Jackson project reports: CVE-2026-91776: TypeDeserializerBase caches the resolved...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142733 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143093 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142723)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142723 advisory. In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdmaisbcall decodes a reply's first words to...

Citrix Workspace App for Windows Out-of-bounds Write (CVE-2026-84419) (CTX697181)

The version of Citrix Workspace App for Windows installed on the remote host is 2507.1 LTSR prior to 2507.1 LTSR CU3 Hotfix 1, or Current Release prior to 2603.20, or 2607 LTSR prior to 2607 LTSR Hotfix 1. It is, therefore, affected by an out-of-bounds write vulnerability as referenced in the...

Linux Distros Unpatched Vulnerability : CVE-2026-111079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142471 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...

RHEL 8 : grafana (RHSA-2026:88188)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88188 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/http:...

RHEL 9 : kernel (RHSA-2026:87805)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87805 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netlabel: Fix NULL pointer...

AlmaLinux 8 : perl-DBI:1.641 (ALSA-2026:85916)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:85916 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...

AlmaLinux 10 : librsvg2 (ALSA-2026:86841)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:86841 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block directl...