Tenable Vulnerabilities in RHEL 10 and Debian Linux Exposed
Article Content
- •RHEL 10 vulnerabilities include CVE-2026-91104 with a CVSS score of 9.3.
- •Debian Linux has a newly disclosed medium severity vulnerability, CVE-2026-108978.
- •No known exploits are currently available for either vulnerability.
Recent advisories have highlighted vulnerabilities affecting Red Hat Enterprise Linux (RHEL) 10 and Debian Linux distributions. RHEL 10 has multiple CVEs, including CVE-2026-91104 with a CVSS score of 9.3, published on 2026-09-16. The vulnerabilities could allow for significant impacts on confidentiality, integrity, and availability. Meanwhile, Debian Linux has reported CVE-2026-108978, a medium severity flaw published on 2026-10-11. Both advisories indicate that no known exploits are available at this time. System administrators are urged to apply patches promptly to mitigate potential risks. The vulnerabilities affect various components, including hplip and rlottie libraries. The patch for RHEL was published on 2026-10-14, while the Debian vulnerability was disclosed just days prior.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Debian and CVE-2025-43023 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions of RHEL are affected?
What is the severity of CVE-2026-91104?
When should I apply the patches?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…