EulerOS Virtualization 2.15.0 : wget (EulerOS-SA-2026-4860)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function...

EulerOS Virtualization 2.15.1 : libarchive (EulerOS-SA-2026-4762)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

Linux Distros Unpatched Vulnerability : CVE-2026-102523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT...

Linux Distros Unpatched Vulnerability : CVE-2026-120474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the redirect interceptor and a shared response cache are...

EulerOS Virtualization 2.15.0 : python-pillow (EulerOS-SA-2026-4845)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when...

EulerOS Virtualization 2.15.0 : sed (EulerOS-SA-2026-4730)

According to the versions of the sed package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When sed is invoked with both -i in-place edit and --follow-symlinks, the function opennextfile performs two separate, non-atomic...

EulerOS Virtualization 2.15.1 : libxml2 (EulerOS-SA-2026-4651)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function...

EulerOS Virtualization 2.15.1 : rsync (EulerOS-SA-2026-4671)

According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list...

Fedora 43 : wordpress (2026-f273e7ec4e)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f273e7ec4e advisory. WordPress 6.9.11 Security Release Security updates included in this release - A weakness in the WordPress upgrade process which can lead to remote code...

EulerOS Virtualization 2.15.1 : httpd (EulerOS-SA-2026-4639)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a...

EulerOS Virtualization 2.15.1 : libpng (EulerOS-SA-2026-4647)

According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

EulerOS Virtualization 2.15.1 : kernel (EulerOS-SA-2026-4640)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445...

EulerOS Virtualization 2.15.1 : gdb (EulerOS-SA-2026-4551)

According to the versions of the gdb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfdelfgcrecordvtentry of the file bfd/elflink.c of the...

EulerOS Virtualization 2.15.1 : python3 (EulerOS-SA-2026-4569)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorit...

Linux Distros Unpatched Vulnerability : CVE-2026-100080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after...

EulerOS Virtualization 2.15.0 : gnupg2 (EulerOS-SA-2026-4816)

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen i...

EulerOS Virtualization 2.15.1 : avahi (EulerOS-SA-2026-4627)

According to the versions of the avahi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4...

EulerOS Virtualization 2.15.1 : curl (EulerOS-SA-2026-4750)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream- dependency tree via...

EulerOS Virtualization 2.15.0 : python-pyasn1 (EulerOS-SA-2026-4725)

According to the versions of the python-pyasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

Linux Distros Unpatched Vulnerability : CVE-2026-123785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via craft...

EulerOS Virtualization 2.15.0 : python-urllib3 (EulerOS-SA-2026-4727)

According to the versions of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level...

Rocky Linux 9 [CIQ] Security Update: virtio-win (crlba-2026_70252)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-202670252 advisory. The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware...

EulerOS Virtualization 2.15.0 : rpm (EulerOS-SA-2026-4852)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the RPM Package Manager RPM. A local user could be affected by a heap buffer overflow vulnerability when processin...

EulerOS Virtualization 2.15.1 : openssl (EulerOS-SA-2026-4773)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a...

Fedora 44 : jupyterlab / python-jupyter-builder / python-jupyterlab-server / etc (2026-34aa0f144e)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-34aa0f144e advisory. New versions of packages in Jupyter stack including Jupyterlab and Notebook. Tenable has extracted the preceding description block directly from the Fedora...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_95100)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695100 advisory. kernel: sctp: stream: fully roll back denied add-stream state CVE-2026-52929 kernel: net/smc: fix UAF in smccdcrxhandler by pinning the socket...

Linux Distros Unpatched Vulnerability : CVE-2026-100082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NU...

EulerOS Virtualization 2.15.1 : unbound (EulerOS-SA-2026-4798)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control'...

EulerOS Virtualization 2.15.0 : sssd (EulerOS-SA-2026-4620)

According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default...

EulerOS Virtualization 2.15.0 : libtiff (EulerOS-SA-2026-4824)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : 'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in...

EulerOS Virtualization 2.15.0 : python-virtualenv (EulerOS-SA-2026-4617)

According to the versions of the python-virtualenv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU...

EulerOS Virtualization 2.15.0 : openssl (EulerOS-SA-2026-4716)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an...

EulerOS Virtualization 2.15.1 : mod_http2 (EulerOS-SA-2026-4768)

According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious...

EulerOS Virtualization 2.15.1 : sudo (EulerOS-SA-2026-4676)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the...

EulerOS Virtualization 2.15.0 : libsodium (EulerOS-SA-2026-4603)

According to the versions of the libsodium package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...

EulerOS Virtualization 2.15.0 : util-linux (EulerOS-SA-2026-4737)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check- Time-of-Use vulnerabilit...

EulerOS Virtualization 2.15.0 : gnupg2 (EulerOS-SA-2026-4596)

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an...

EulerOS Virtualization 2.15.1 : libssh2 (EulerOS-SA-2026-4764)

According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the...

EulerOS Virtualization 2.15.0 : python3 (EulerOS-SA-2026-4849)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combinin...

Linux Distros Unpatched Vulnerability : CVE-2026-123125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal addresses ar...

Fedora 44 : wordpress (2026-b11dcc003b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b11dcc003b advisory. WordPress 6.9.11 Security Release Security updates included in this release - A weakness in the WordPress upgrade process which can lead to remote code...

EulerOS Virtualization 2.15.1 : qemu (EulerOS-SA-2026-4682)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in QEMU Virtualization Software the affected version unknown. It has been declared as critical.The CWE...

EulerOS Virtualization 2.15.1 : libxml2 (EulerOS-SA-2026-4767)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...

EulerOS Virtualization 2.15.0 : qemu (EulerOS-SA-2026-4850)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the...

EulerOS Virtualization 2.15.1 : ncurses (EulerOS-SA-2026-4654)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyzestring.CVE-2025-69720 Tenable has...

EulerOS Virtualization 2.15.0 : expat (EulerOS-SA-2026-4692)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory...

EulerOS Virtualization 2.15.0 : haveged (EulerOS-SA-2026-4696)

According to the versions of the haveged package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...

Linux Distros Unpatched Vulnerability : CVE-2026-123976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in checkedffile that allows attackers to overflow the 256-element annotch array by supplyin...

EulerOS Virtualization 2.15.0 : glibc (EulerOS-SA-2026-4595)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interfa...

EulerOS Virtualization 2.15.0 : vim (EulerOS-SA-2026-4623)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag...