Linux Distros Unpatched Vulnerability : CVE-2026-117555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146668)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146668 advisory. In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata field...

Linux Distros Unpatched Vulnerability : CVE-2025-71439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversize...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146647)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146647 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS...

Linux Distros Unpatched Vulnerability : CVE-2026-117916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-117916 No...

Linux Distros Unpatched Vulnerability : CVE-2026-117935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-117898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146247 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer...

Linux Distros Unpatched Vulnerability : CVE-2026-57199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

Linux Distros Unpatched Vulnerability : CVE-2026-118316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via ...

Linux Distros Unpatched Vulnerability : CVE-2026-118014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118014 Note that Nessus relies...

MiracleLinux 9 : golang-1.26.10-1.el9_8 (AXSA:2026-2175:11)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2175:11 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via...

Oracle Linux 9 : kernel (ELSA-2026-90365)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90365 advisory. - netfilter: flowtable: hold reference on ct until flow is released CKI Backport Bot RHEL-280075 CVE-2026-98320 - vfio/pci: clear vdev-msiperm after...

Linux Distros Unpatched Vulnerability : CVE-2026-116672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient...

Linux Distros Unpatched Vulnerability : CVE-2026-117921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146846 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places ACPICA: validate handler object type in...

Linux Distros Unpatched Vulnerability : CVE-2026-99165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: revalidate output stream after association connect wait When message interleaving is enabled, the first send waits for association establishment before...

Fedora 46 : tailscale (2026-756e4efa06)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-756e4efa06 advisory. Automatic update for tailscale-1.102.5-1.fc46. Changelog Wed Oct 28 2026 Jonathan Wright - 1.102.5-1 - update to 1.102.5 Wed Oct 28 2026 Jonathan Wright -...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146661)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146661 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rlused against rlcount in refcount block validator ocfs2findrefcountrecinrl walk...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146683)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146683 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove a...

Linux Distros Unpatched Vulnerability : CVE-2026-116131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Body versions before 1.2301 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded...

Linux Distros Unpatched Vulnerability : CVE-2026-117609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtl433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2mc that allows nearby attackers to write past a 7-byte stack buffer by...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146691 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpfgetstack getperfcallchain returns a per-CPU perfcallchainentry buff...

Linux Distros Unpatched Vulnerability : CVE-2026-114216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in the HTTP/1.1 chunked body reader of mtrudel bandit allows an...

Linux Distros Unpatched Vulnerability : CVE-2024-58400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b3701 contains an out-of-bounds read vulnerability in llamadecodeinternal and llamaencodeinternal that allows remote unauthenticated attackers ...

Linux Distros Unpatched Vulnerability : CVE-2026-118320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-116285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when...

Linux Distros Unpatched Vulnerability : CVE-2026-99182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture When chcount is smaller than blob-alhcfg.devicecount e.g. a mono capture stream, su...

Linux Distros Unpatched Vulnerability : CVE-2026-99102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfssetattrsize ntfssetattrsize updates isize and resizes the...

Linux Distros Unpatched Vulnerability : CVE-2026-99156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: st: Fix use-after-free race between stremove and stopen stremove drops the probe reference on the scsitape with krefput and only afterwards removes its...

Linux Distros Unpatched Vulnerability : CVE-2026-99132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't hold buffer locks across sync transaction commit in xfssyncsbbuf xfssyncsbbuf holds sb/rtsb buffer locks across a synchronous xfstranscommit, which...

TencentOS Server 4: xorg-x11-server (TSSA-2026:1240)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1240 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-117983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-11798...

Oracle Java SE Multiple Vulnerabilities (October 2026 CPU)

The 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 26.0.2 and 27 releases of Oracle Java SE installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Java SE, Oracle JavaFX product of Oracle...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793100968)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793100968 advisory. - In the Linux kernel, the following vulnerability has been resolved: udf: Avoid double brelse in udfrename syzbot reported a...

Linux Distros Unpatched Vulnerability : CVE-2026-117961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-117867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-118322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-117964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-117891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate chunk length in the inqueue parser SCTP chunks always include a four-byte generic header, but sctpinqpop currently accepts shorter declared...

Linux Distros Unpatched Vulnerability : CVE-2026-99197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: mv643xx: move setting of netops to fix crash mv643xxethprobe connects the PHY before...

Fedora 43 : webkitgtk (2026-8222d28aa0)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8222d28aa0 advisory. Update to version 2.54.2. - Fix performance when compositing layers with backdrop filters. - Fix prewarmed web process leak when they are rejected due to...

Linux Distros Unpatched Vulnerability : CVE-2026-117960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-117601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a...

Linux Distros Unpatched Vulnerability : CVE-2026-118013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118013 Note th...

Linux Distros Unpatched Vulnerability : CVE-2026-117948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-117997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-99143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Keep the predicate limit separate from program capacity predicateparse adds two to nrpreds to reserve the terminal TRUE and FALSE entries. It also uses...

Linux Distros Unpatched Vulnerability : CVE-2026-117902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...