Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143032 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception pat...

Linux Distros Unpatched Vulnerability : CVE-2026-114718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142670)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142670 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to h...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142481)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142481 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the...

RHEL 9 : kernel (RHSA-2026:87264)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:87264 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: validate checksumstart before...

Linux Distros Unpatched Vulnerability : CVE-2026-114728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcubewashtml...

CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792616669)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792616669 advisory. - The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-char...

Rocky Linux 8.6 [CIQ] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ciqsa-2026_1655)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261655 advisory. This advisory aggregates security fixes for the libtiff SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2026-12912. Tenable has extracted the preceding description...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142668 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-sl...

Linux Distros Unpatched Vulnerability : CVE-2026-105483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host...

Linux Distros Unpatched Vulnerability : CVE-2026-110354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked...

Linux Distros Unpatched Vulnerability : CVE-2026-85556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PowerDNS reports: CVE-2026-85556 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142503 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142732 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the...

Oracle Linux 10 : iperf3 (ELSA-2026-88207)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-88207 advisory. - DoS via UDP receive worker infinite loop CVE-2026-102253 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142538 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when authchunk is NULL sctpauthchunkverify returns true...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142565)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142565 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: fix recursive locking deadlock in auditdupeexe A deadlock occurs in the audit subsystem...

SUSE SLES15: kernel-livepatch-5_14_21-150400_24_235-default / etc (SUSE-SU-2026:4785-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4785-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142549)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142549 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143037 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlmmiglockreshandler A node receiving a DLMMIGLOCKRES message trusts...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142501 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792562667)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792562667 advisory. - GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

AlmaLinux 10 : cockpit-machines (ALSA-2026:86971)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:86971 advisory. cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Data...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : poppler vulnerability (USN-8950-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8950-1 advisory. It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143118 advisory. In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomapadjustreadrange assumes...

SUSE SLES15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-bdb / etc (SUSE-SU-2026:4817-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4817-1 advisory. This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious...

Linux Distros Unpatched Vulnerability : CVE-2026-95168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in...

RHEL 9 : httpd (RHSA-2026:88229)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88229 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: httpd: HTTP...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142521 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPCNLMEDIASET and...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142495)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142495 advisory. In the Linux kernel, the following vulnerability has been resolved: rhashtable: clear stale iter-p on table restart rhashtablewalkstartcheck has two restart paths wh...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142765 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that th...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142509)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142509 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix authhmacs array size in struct sctpcookie The authhmacs array in struct sctpcookie is...

Linux Distros Unpatched Vulnerability : CVE-2025-31699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but never fully...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142489 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout lpc32xxxmitdma waits for the DM...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143070 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142705 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in allocns After changes in commit a1bd627b46d1 apparmor: share profile nam...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142533 advisory. In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlangropreparereceive. udptunnelsockrelease could set...

RHEL 9 : .NET 8.0 (RHSA-2026:88422)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88422 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

AlmaLinux 9 : openexr (ALSA-2026:86983)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:86983 advisory. openexr: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 openexr: OpenEXR: Denial of Service or Informati...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142531 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummyhcd: prevent fiforeq reuse during giveback dummyhcd embeds a single shared...

Palo Alto GlobalProtect App MacOS 6.2.x < 6.2.8-h15 / 6.3.x < 6.3.3-h16 Local Privilege Escalation (CVE-2026-0315)

The version of Palo Alto GlobalProtect App installed on the remote macOS host is 6.2.x prior to 6.2.8-h15, or 6.3.x prior to 6.3.3-h16. It is, therefore, affected by a local privilege escalation vulnerability: - A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect ap...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143084 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctpprocessasconf caches the...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142564 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in...

Linux Distros Unpatched Vulnerability : CVE-2026-114727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as val...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143089 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fibnhcupdatemtu fibnhcupdatemtu walks the nexthop exception table und...

openSUSE 16 Security Update : gitoxide (openSUSE-SU-2026:22126-1)

"The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22126-1 advisory. Changes in gitoxide: Update to version 0.60.0: BREAKING: remove the full-screen progress mode: the --progress and --progress-keep-open flags and the...

AlmaLinux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel (ALMALINUX9.6:CLSA-2026:1792635672)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792635672 advisory. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76886 Note that Nessus has not test...

Debian dsa-6578 : aide - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6578 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6578-1 [email protected] https://www.debian.org/security/...

Oracle Linux 9 : fetchmail (ELSA-2026-86981)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-86981 advisory. 6.4.24-1.1 - Fix CVE-2026-94184: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 Resolves: RHEL-265195 Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_86907)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686907 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...