Linux Distros Unpatched Vulnerability : CVE-2026-42007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write...

Linux Distros Unpatched Vulnerability : CVE-2026-82254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attacke...

Linux Distros Unpatched Vulnerability : CVE-2026-42392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returne...

GLSA-202608-32 : Tor: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-32 Tor: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-38822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command...

Linux Distros Unpatched Vulnerability : CVE-2026-40018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - None None None No publicly available exploits are known. CVE-2026-40018 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-40017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD...

Linux Distros Unpatched Vulnerability : CVE-2025-70292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - u-boot - None Ubuntu Linux - Unknown description CVE-2025-70292 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-38820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/...

FreeBSD : Elixir -- Denial of service via uncontrolled recursion in charlist conversion (aac25935-f19d-4ac8-80fc-043365686a63)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aac25935-f19d-4ac8-80fc-043365686a63 advisory. tomciopp reports: Uncontrolled recursion in the Elixir standard library lets an attacker who controls a...

openSUSE 16 Security Update : wget (openSUSE-SU-2026:21665-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21665-1 advisory. Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. -...

Linux Distros Unpatched Vulnerability : CVE-2026-38821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the...

Unity Linux 20.1060a / 20.1070a Security Update: pcp (UTSA-2024-004479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-004479 advisory. A vulnerability was found in Performance Co-Pilot PCP. This flaw allows an attacker to send specially crafted data to the system, which could cause the program to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001398)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001398 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also...

Debian dla-4759 : xrdp - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4759 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4759-1 [email protected]...

Linux Distros Unpatched Vulnerability : CVE-2026-33605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode...

Linux Distros Unpatched Vulnerability : CVE-2026-55584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSIALLOWED access-control check in readconfig.php trusts...

Linux Distros Unpatched Vulnerability : CVE-2025-70293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-82255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlle...

Linux Distros Unpatched Vulnerability : CVE-2026-42395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The logi...

Linux Distros Unpatched Vulnerability : CVE-2025-70290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk...

Unity Linux 20.1070e Security Update: rubygem-websocket-driver (UTSA-2026-104955)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104955 advisory. websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a TCP...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001492)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001492 advisory. In the Linux kernel, the following vulnerability has been resolved: netns: Make getnetns handle zero refcount net Syzkaller hit a warning: refcountt: addition on 0;...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-000416)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-000416 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids assuming...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001507)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001507 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtpdevxmit syzbot/KMSAN reported use of uninit-value in getdevxmit 1...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001459 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: musb: sunxi: Fix accessing an released usb phy Commit 6ed05c68cbca usb: musb: sunxi:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002938 advisory. In the Linux kernel, the following vulnerability has been resolved: mfd: syscon: Fix null pointer dereference in ofsysconregister kasprintf returns a pointer to...

Unity Linux 20.1070e Security Update: unbound (UTSA-2026-035851)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035851 advisory. NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain...

Unity Linux 20.1070e Security Update: spice-vdagent (UTSA-2026-104950)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104950 advisory. A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the gue...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001504)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001504 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: fix LED ID check in ledtgcheck Syzbot has reported the following BUG detected...

Unity Linux 20.1070a Security Update: libgcrypt (UTSA-2026-104991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104991 advisory. Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt. Tenable has extracted the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001494 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in itsvpeirqdomainalloc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001468 advisory. In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in keytaskpermission KASAN reports an out of bounds read:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001437 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the fresh...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001481 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisctreereducebacklog on TCHROOT In qdisctreereducebacklog, Qdiscs with major...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001426)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001426 advisory. In the Linux kernel, the following vulnerability has been resolved: bnx2x: Fix multiple UBSAN array-index-out-of-bounds Fix UBSAN warnings that occur when using a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002649 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: pnx: Fix potential deadlock warning from deltimersync call in isr When deltimersync is calle...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001480 advisory. In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix Use-After-Free in ovsctexit Since kfreercu, which is called in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001418 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open Yang Erkun reports that when two...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001447 advisory. In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prpcreatetaggedframe The prpfillrct function can fail. In that...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001448 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in sidpminit When the allocation of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002821 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings warning Turning on CONFIGDMAAPIDEBUGSG results...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001454 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002889)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002889 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in mpiecinit When the mpiecctx structure is...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001487 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix use after free in rmiunregisterfunction The putdevice calls...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-002709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002709 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfdlookup fails, gtpencapenablesocket retur...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001391 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfsreftreemod after we...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001440)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001440 advisory. In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: vmalloc-out-of-bounds Read in acpinfitctl Fix an issue detected by syzbot with KASAN:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001443 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in triegetnextkey triegetnextkey allocates a node stack with size...

Unity Linux 20.1070a Security Update: dovecot (UTSA-2026-104990)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104990 advisory. An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so...