TencentOS Server 4: pcs (TSSA-2026:1351)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1351 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_93412)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693412 advisory. kernel: sctp: stream: fully roll back denied add-stream state CVE-2026-52929 kernel: ipv6: sit: reload inner IPv6 header after GSO offloads CVE-2026-53228...

Oracle Linux 10 : delve (ELSA-2026-95519)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-95519 advisory. 1.26.1-3.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-3 - Add GOMODCACHE in %check Tenable has extracted the preceding...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150424)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150424 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain configurations, processin...

TencentOS Server 4: git-lfs (TSSA-2026:1325)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1325 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Unity Linux 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150423)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150423 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150434 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return...

Rocky Linux 8.6 [CIQ] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ciqsa-2026_1753)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261753 advisory. This advisory aggregates security fixes for the libssh SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2023-6004, CVE-2023-6918. Tenable has extracted the...

Rocky Linux 10.2 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc (crlsa-2026_93464)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202693464 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 Tenable has extracted the preceding description block directly from the CIQ security...

openSUSE 16 Security Update : nodejs22 (openSUSE-SU-2026:22210-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22210-1 advisory. - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent bsc1286565. - CVE-2026-105482: dns.resolve...

openSUSE 16: brotli / libbrotli-devel / libbrotlicommon1 / etc (openSUSE-SU-2026:22213-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22213-1 advisory. This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution bsc1287778. Tenabl...

CVE-2026-107903: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0

Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox 2.20.5.0...

SUSE SLES15 Security Update : nodejs24 (SUSE-SU-2026:5037-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5037-1 advisory. Security issues fixed: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent...

RockyLinux 9 : webkit2gtk3 (RLSA-2026:95194)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95194 advisory. chromium-browser: skia: chromium-browser: skia: Use after free in Skia CVE-2026-85049 chromium-browser: skia: Skia: Cross-origin data disclosure via...

CVE-2026-92695: pavel-odintsov fastnetmon: FastNetMon is a high-performance DDoS detector and sensor

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parsepacket callback in src/pcapplugin/pcapcollector.cpp is registered through pcaploop and processes captured frames when pcap = on without checking packethdr-caplen. A short frame or an...

CentOS Linux 7.9 [CIQ] Security Update: openssh / openssh-askpass / openssh-cavs / openssh-clients / etc Multiple Vulnerabilities (ciqsa-2026_1752)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261752 advisory. This advisory aggregates security fixes for the openssh SRPM in CIQ CentOS Bridge 7.9. It addresses 23 CVEs: CVE-2025-26465, CVE-2016-1908, CVE-2006-492...

Linux Distros Unpatched Vulnerability : CVE-2026-118513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authentication bypass by spoofing in X509Authenticator and X509AuthenticationListener of Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to...

AlmaLinux 9.6 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793887401)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793887401 advisory. - SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memor...

MiracleLinux 8 : libXi-1.7.10-4.el8_10 (AXSA:2026-2251:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2251:04 advisory. libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION...

Rocky Linux 10.2 [CIQ] Security Update: libXi / libXi-debuginfo / libXi-debugsource / libXi-devel Multiple Vulnerabilities (crlsa-2026_93441)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693441 advisory. libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION...