Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-150443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150443 advisory. A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size...

Linux Distros Unpatched Vulnerability : CVE-2026-18376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-18376 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

Elasticsearch 1.x / 3.x < 3.8.6 / 4.0.x < 4.2.1 (ESA-2026-215)

The version of Elasticsearch installed on the remote host is 1.x prior to 3.8.6, or 4.0.x prior to 4.2.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-215 advisory. - Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise ECE...

Oracle Linux 9 : tesseract (ELSA-2026-95086)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95086 advisory. - Fix incomplete CVE-2026-88051: reset 'sizeused' on validation failure in 'GenericVector::read'; check 'fontinfotable' and 'fontsettable' read return...

AlmaLinux 9.2 [TuxCare] Security Update: grafana-pcp (ALMALINUX9.2:CLSA-2026:1793887169)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793887169 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150503)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150503 advisory. Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a MemoryError and the...

Linux Distros Unpatched Vulnerability : CVE-2026-122032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.29 contains a SQL injection vulnerability that allows authenticated attackers with back- office access to inject arbitrary SQL by submitting a...

Linux Distros Unpatched Vulnerability : CVE-2026-121957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains a use-after-free vulnerability that allows malicious RDP servers to corrupt client memory by racing the RDPGFX ResetGraphics...

Oracle Linux 8 : gimp:2.8 (ELSA-2026-95482)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-95482 advisory. - fix CVE-2026-112257 - modify fix for CVE-2026-4154 - fix CVE-2026-90947 - fix CVE-2026-90948 - fix CVE-2026-92248 - fix CVE-2026-97185 - fix CVE-2026-59090 -...

Unity Linux 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150446)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150446 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (crlsa-2026_93414)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202693414 advisory. kernel: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Tenable has extracted the preceding description block directly from the CIQ securit...

Oracle Linux 10 : kernel (ELSA-2026-95367)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95367 advisory. - sunrpc: wait for in-flight TLS handshake callback when cancel loses race Olga Kornievskaia RHEL-283649 CVE-2026-72221 - sunrpc: pin svcxprt across...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150483 advisory. Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are...

Oracle Linux 9 : dpdk (ELSA-2026-94629)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-94629 advisory. 25.11-2 - Backport fixes for CVE-2026-86846 CVE-2026-86848 CVE-2026-86561 CVE-2026-86562 CVE-2026-86563 CVE-2026-86567 CVE-2026-86566 CVE-2026-86849...

Fedora 44 : pipx (2026-a1c8629ff7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a1c8629ff7 advisory. Update to 1.18.12 upstream release, addressing 24 security problems. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 45 : pipx (2026-d521258d12)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d521258d12 advisory. Update to 1.18.12 upstream release, fixing GHSA-jpqf-qh96-2pqf. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : rust-redlib (2026-b6daefd0fc)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b6daefd0fc advisory. Rebuilt with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which...

Linux Distros Unpatched Vulnerability : CVE-2026-121727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass httpbodymax by sendi...

Fedora 43 : valkey (2026-1fd9c58e29)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1fd9c58e29 advisory. Valkey 8.1.11 - Released Mon 26 October 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible...

Oracle Linux 9 : webkit2gtk3 (ELSA-2026-95194)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95194 advisory. 2.54.2-0.el98.2 - Update bundled Skia to aa789d9bd566 Tenable has extracted the preceding description block directly from the Oracle Linux security...