SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:5091-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5091-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : APT vulnerability (USN-8996-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8996-1 advisory. Max Justicz discovered that APT incorrectly handled hard links when encountering...

Linux Distros Unpatched Vulnerability : CVE-2026-121952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdpreadbitmapcachev2capabilityset rejects only numCellCaches values above 5, yet the bitma...

CVE-2026-35494: Samsung Semiconductor: In the baseband, memory corruption during NAS packet processing can cause a denial of service.

In the baseband, memory corruption during NAS packet processing can cause a denial of service...

Fedora 45 : python3.11 (2026-015c45363c)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-015c45363c advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 44 : python3.15 (2026-4f056db42e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4f056db42e advisory. - Update to Python 3.15.2 - CVE 2026-114583: tar filter allows writing outside destination via empty-named symlink - CVE 2026-115557: Distrust compromised...

Qnap QTS / QuTS hero NULL Pointer Dereference (CVE-2025-47213)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Rocky Linux 8.6 [CIQ] Security Update: libsoup / libsoup-devel Multiple Vulnerabilities (ciqsa-2026_1756)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261756 advisory. This advisory aggregates security fixes for the libsoup SRPM in CIQ LTS 8.6. It addresses 11 CVEs: CVE-2025-32049, CVE-2026-15711, CVE-2025-32906,...

CVE-2026-122146: 101arrowz fflate: A weakness has been identified in 101arrowz fflate up to 0.8.3

A weakness has been identified in 101arrowz fflate up to 0.8.3. This issue affects the function unzipSync of the file esm/index.mjs. This manipulation causes memory corruption. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for...

CVE-2026-123119: sensiolabs symfony: The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached hosts,…

The Symfony HttpClient component NoPrivateNetworkHttpClient does not pin the checked IP address of cached hosts, allowing for DNS rebinding to bypass private network restrictions, resulting in enumeration of internal hosts and ports in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x...

CVE-2026-55458: caddyserver caddy: Caddy is an extensible server platform that uses TLS by default

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.5, the reverse proxy's finalizeResponse method in modules/caddyhttp/reverseproxy/reverseproxy.go handles an upstream 101 Switching Protocols response before running removeConnectionHeaders and the hopHeaders deletion...

Linux Distros Unpatched Vulnerability : CVE-2026-121997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process...

CVE-2026-111253: Red Hat Red Hat Hardened Images: A flaw was found in dnf5daemon-server

A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not verify that the caller is the unique sender that created the session. A local attacker can modify another user's live package-management session and replace its resolved transaction plan. I...

SUSE SLES15 Security Update : libsoup (SUSE-SU-2026:5063-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5063-1 advisory. This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow...

RockyLinux 8 : kernel (RLSA-2026:95212)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95212 advisory. kernel: sctp: stream: fully roll back denied add-stream state CVE-2026-52929 kernel: net/smc: fix UAF in smccdcrxhandler by pinning the socket...

Fedora 44 : markdownlint-cli2 (2026-6215800886)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6215800886 advisory. Update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_93413)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693413 advisory. kernel: Kernel: Denial of Service in network socket error handling CVE-2026-22977 kernel: x86/CPU/AMD: Prevent improper isolation of shared resources i...

Fedora 44 : python3.11 (2026-7cf032d4b0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7cf032d4b0 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 45 : python3.13 (2026-77153b01c6)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-77153b01c6 advisory. New version of the Python interpreter ---- New version of Python 3.13. There are no significant changes. Tenable has extracted the preceding...

Fedora 45 : python3.14 (2026-6530ce786a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6530ce786a advisory. New version of the Python interpreter ---- New version of the Python interpreter. Tenable has extracted the preceding description block directly fro...