Oracle Linux 8 : flatpak (ELSA-2026-89859)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89859 advisory. - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272181 Tenable has extracted the preceding description...

Fedora 43 : libical (2026-13d6a67e0d)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-13d6a67e0d advisory. Add a patch for CVE-2026-111269: Denial of Service via out-of-bounds read in icalvaluedecodeicalstring Tenable has extracted the preceding description block...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Enlightenment vulnerability (USN-8981-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8981-1 advisory. It was discovered that the enlightenmentsys helper in Enlightenment incorrectly handled certain pathnames. A local attacker...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : libsoup vulnerabilities (USN-8975-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8975-1 advisory. It was discovered that libsoup incorrectly handled certain WebSocket frames. A remote...

AlmaLinux 9.2 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793791113)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793791113 advisory. - FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in...

Linux Distros Unpatched Vulnerability : CVE-2026-121197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-121052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-121160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromiu...

Oracle Linux 9 : glibc (ELSA-2026-500576)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500576 advisory. - CVE-2026-77117: Non-progress DoS in SHIFTJISX0213 decoding RHEL-248058 - CVE-2026-80489: Non-progress DoS in EUCJISX0213 decoding RHEL-249636 -...

Linux Distros Unpatched Vulnerability : CVE-2026-111362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. django.contrib.gis.gdal.OGRGeometry does not restrict external...

Ubuntu 16.04 LTS : Sprockets vulnerability (USN-8990-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8990-1 advisory. It was discovered that Sprockets incorrectly handled certain specially crafted requests when the Sprockets server was used in production. A remote attacker could...

Fedora 44 : ags (2026-f10e7d9f0f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f10e7d9f0f advisory. Latest upstream bugfix release from 3.6.2 branch. Changes: https://github.com/adventuregamestudio/ags/releases/tag/v3.6.2.22 . Also fixes CVE-2026-95512 in...

Linux Distros Unpatched Vulnerability : CVE-2026-121134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page...

Ubuntu 16.04 LTS : Linux kernel (AWS) vulnerability (USN-8967-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8967-1 advisory. Jrgen Gro discovered that the Xen network backend driver in the Linux kernel did not adequately limit the amount of queued packets when a guest did not process...

Linux Distros Unpatched Vulnerability : CVE-2026-120638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect. redirect decodes HTML...

RHEL 9 : bind (RHSA-2026:95241)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95241 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

RockyLinux 9 : dpdk (RLSA-2026:94629)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:94629 advisory. dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup CVE-2026-86561 dpdk: dpdk: Control-queue descriptor double-fetch...

Linux Distros Unpatched Vulnerability : CVE-2026-121142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy v...

Linux Distros Unpatched Vulnerability : CVE-2026-121244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a craft...

Fedora 44 : chromium (2026-3e0794fe4b)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3e0794fe4b advisory. Update to 156.0.8078.73, include 21 security fixes CVE-2026-119260: Use after free in Frames CVE-2026-119261: Improper input validation in Skia...