MiracleLinux 8 : gstreamer1-plugins-bad-free-1.16.1-9.el8_10.2 (AXSA:2026-1664:05)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1664:05 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 Tenable has extracted the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098979)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098979 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tail call between progs attached to different hooks bpf progs can be attached to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104757)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104757 advisory. SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression...

Linux Distros Unpatched Vulnerability : CVE-2026-79124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML pag...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098942)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098942 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for...

Linux Distros Unpatched Vulnerability : CVE-2026-78899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-py (UTSA-2026-093196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093196 advisory. A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial...

RHEL 9 : isns-utils (RHSA-2026:60006)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60006 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098826 advisory. In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkbresource null dereference This patch fixes a possible null pointer dereferen...

Linux Distros Unpatched Vulnerability : CVE-2026-79214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098955)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098955 advisory. In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini reports that the keyring co...

Linux Distros Unpatched Vulnerability : CVE-2026-80520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: fix NULL dereference when killing missing key ovpncryptokillkey assumes both crypto slots are populated and dereferences each slot before checking it. Tha...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093154 advisory. The pngerr function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098809 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount Syzbot has found an ODEBUG bug in ext4fillsuper Th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099009)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099009 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buflen before strnlen in sndctleleminitenumnames sndctleleminitenumnames...

Linux Distros Unpatched Vulnerability : CVE-2026-79050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML pag...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093184 advisory. Buffer overflow in the pngsetPLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before...

Linux Distros Unpatched Vulnerability : CVE-2026-79052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098851)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098851 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhostscsisetendpoint If vhostscsisetendpoint is...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: struts (UTSA-2026-031328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031328 advisory. ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site...

Linux Distros Unpatched Vulnerability : CVE-2026-79133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-79195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104795)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104795 advisory. FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory ...

Linux Distros Unpatched Vulnerability : CVE-2026-79055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to obtain sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-78944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the...

Linux Distros Unpatched Vulnerability : CVE-2026-79077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-104824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104824 advisory. sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when sftp server:/path . is used with an attacker-controlled server. Tenable...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099003)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099003 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU The Xen privcmd driver allows to issue arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-74746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats original-direction tuple nodes as owning entries. Publishing the original nod...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104788 advisory. ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098856)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098856 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104590)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104590 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAPNETADMIN in the device netns for changelink ipip6changelink operates on at...

Linux Distros Unpatched Vulnerability : CVE-2026-78951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HT...

Linux Distros Unpatched Vulnerability : CVE-2026-79779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over...

Linux Distros Unpatched Vulnerability : CVE-2026-80587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also because in different places, the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098843 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp-cmd ufshcdqueuecommand may be called two times in a row for...

Linux Distros Unpatched Vulnerability : CVE-2026-65333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: trousers (UTSA-2026-093151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093151 advisory. An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: metrics (UTSA-2026-093185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093185 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fwupd (UTSA-2026-054034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054034 advisory. A PGP signature bypass flaw was found in fwupd all versions, which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is...

Linux Distros Unpatched Vulnerability : CVE-2026-80551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Ensure first IDAW remains constant The first IDAW in a list does not need to be on a 2K/4K boundary like all others, and so is read separately to...

Oracle Linux 10 : assertj-core (ELSA-2026-59372)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59372 advisory. - Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter Tenable has extracted the preceding description block directly from the Oracle Linux...

Linux Distros Unpatched Vulnerability : CVE-2026-79243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces...

Linux Distros Unpatched Vulnerability : CVE-2026-79272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak...

Linux Distros Unpatched Vulnerability : CVE-2026-79220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098678)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098678 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 iwcm...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104546 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reports for more incorrect IPv6...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104820)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104820 advisory. In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a 'response-ip'...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032285 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

SUSE SLES15 Security Update : kernel RT (Live Patch 12 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3746-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3746-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.40 fixes various security issues: The following security issues were fixed: -...