NewStart CGSL MAIN 7.02 : busybox Multiple Vulnerabilities (NS-SA-2026-0087)

The remote NewStart CGSL host, running version MAIN 7.02, has busybox packages installed that are affected by multiple vulnerabilities: - BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal...

NewStart CGSL MAIN 7.02 : xorg-x11-server Vulnerability (NS-SA-2026-0102)

The remote NewStart CGSL host, running version MAIN 7.02, has xorg-x11-server packages installed that are affected by a vulnerability: - A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow...

EulerOS 2.0 SP12 : util-linux (EulerOS-SA-2026-3317)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition...

EulerOS 2.0 SP12 : unbound (EulerOS-SA-2026-3391)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to...

RHEL 10 : skopeo (RHSA-2026:64818)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64818 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2026-3330)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privileg...

EulerOS 2.0 SP12 : rpm (EulerOS-SA-2026-3382)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-based buffer overflow vulnerability was found in RPM's NDB New Database backend in the lib/backend/ndb/rpmpkg.c file. This vulnerability is...

EulerOS 2.0 SP12 : wget (EulerOS-SA-2026-3394)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-3339)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 When processing HTTP/...

RHEL 10 : 389-ds-base (RHSA-2026:64768)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:64768 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server...

NewStart CGSL MAIN 7.02 : expat Vulnerability (NS-SA-2026-0101)

The remote NewStart CGSL host, running version MAIN 7.02, has expat packages installed that are affected by a vulnerability: - In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. CVE-2026-4518...

EulerOS 2.0 SP12 : openssl (EulerOS-SA-2026-3288)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3270)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions...

EulerOS 2.0 SP12 : ca-certificates (EulerOS-SA-2026-3326)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

EulerOS 2.0 SP12 : bzip2 (EulerOS-SA-2026-3250)

According to the versions of the bzip2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an outofbounds wri...

RHEL 8 : redhat-ds:11 (RHSA-2026:64792)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64792 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

EulerOS 2.0 SP12 : perl-GD (EulerOS-SA-2026-3367)

"According to the versions of the perl-GD package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle...

RHEL 9 : 389-ds-base (RHSA-2026:64781)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64781 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Fedora 43 : chirp (2026-23b8df7771)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-23b8df7771 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-3264)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 When processing HTTP/...

EulerOS 2.0 SP12 : sqlite (EulerOS-SA-2026-3313)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

EulerOS 2.0 SP12 : nmap (EulerOS-SA-2026-3287)

According to the versions of the nmap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdataprimitive libnetutil/netutil.cc, so the...

EulerOS 2.0 SP12 : perl-HTTP-Tiny (EulerOS-SA-2026-3369)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx...

EulerOS 2.0 SP12 : glib-networking (EulerOS-SA-2026-3335)

According to the versions of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain ...

NewStart CGSL MAIN 7.02 : gstreamer1-plugins-base Vulnerability (NS-SA-2026-0099)

The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1-plugins-base packages installed that are affected by a vulnerability: - GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

NewStart CGSL MAIN 7.02 : vim Multiple Vulnerabilities (NS-SA-2026-0107)

The remote NewStart CGSL host, running version MAIN 7.02, has vim packages installed that are affected by multiple vulnerabilities: - Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault SEGV exist in Vim's swap file...

EulerOS 2.0 SP12 : python-idna (EulerOS-SA-2026-3299)

According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and...

EulerOS 2.0 SP12 : glib-networking (EulerOS-SA-2026-3260)

According to the versions of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain ...

EulerOS 2.0 SP12 : attr (EulerOS-SA-2026-3323)

According to the versions of the attr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...

EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-3320)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized...

EulerOS 2.0 SP12 : libxml2 (EulerOS-SA-2026-3281)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a...

EulerOS 2.0 SP12 : libXfont2 (EulerOS-SA-2026-3272)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client...

EulerOS 2.0 SP12 : graphite2 (EulerOS-SA-2026-3340)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

EulerOS 2.0 SP12 : samba (EulerOS-SA-2026-3310)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the 'chec...

NewStart CGSL MAIN 7.02 : gstreamer1-plugins-good Multiple Vulnerabilities (NS-SA-2026-0103)

The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1-plugins-good packages installed that are affected by multiple vulnerabilities: - In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetrak function may read past the end of a heap buffer while parsing an MP4 file,...

RHEL 10 : git-lfs (RHSA-2026:64788)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:64788 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...

RHEL 8 : gegl (RHSA-2026:64802)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:64802 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: GIMP: Arbitrary code execution via heap-based buffe...

Fedora 43 : nsd (2026-3ff003d397)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3ff003d397 advisory. BUG FIXES: Fix for CVE-2026-18664: IP range access control restrictions are bypassed for some unintended IP. Thanks to Qifan Zhang, Palo Alto Networ...

EulerOS 2.0 SP12 : proftpd (EulerOS-SA-2026-3373)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the...

EulerOS 2.0 SP12 : python3 (EulerOS-SA-2026-3305)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to...

RHEL 8 : gegl (RHSA-2026:64801)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:64801 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: GIMP: Arbitrary code execution via heap-based buffe...

EulerOS 2.0 SP12 : rpm (EulerOS-SA-2026-3307)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-based buffer overflow vulnerability was found in RPM's NDB New Database backend in the lib/backend/ndb/rpmpkg.c file. This vulnerability is...

EulerOS 2.0 SP12 : haproxy (EulerOS-SA-2026-3342)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP12 : libinput (EulerOS-SA-2026-3276)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-3279)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

NewStart CGSL MAIN 7.02 : perl Vulnerability (NS-SA-2026-0098)

The remote NewStart CGSL host, running version MAIN 7.02, has perl packages installed that are affected by a vulnerability: - Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide...

EulerOS 2.0 SP12 : perl-GD (EulerOS-SA-2026-3292)

"According to the versions of the perl-GD package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle...

EulerOS 2.0 SP12 : util-linux (EulerOS-SA-2026-3392)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition...

NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2026-0086)

The remote NewStart CGSL host, running version MAIN 7.02, has kernel packages installed that are affected by multiple vulnerabilities: - In the Linux kernel, the following vulnerability has been resolved: xen: fix UAF in dmabufexpfrompages dmabuffd fixes; no preferences regarding the tree it goes...

EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2026-3278)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combine...