Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500572)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500572 advisory. - NFSD: Define actions for the new timedeleg FATTR4 attributes Chuck Lever Orabug: 39004166 CVE-2025-40326 - ipv4: free inetopt and ireqopt afte...

EulerOS Virtualization 2.13.0 : brotli (EulerOS-SA-2026-1626)

According to the versions of the brotli package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Scrapy versions up to 2.13.2 are vulnerable to a denial of service DoS attack due to a flaw in its brotli decompression...

Google Chrome < 157.0.8103.38 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 157.0.8103.38. It is, therefore, affected by multiple vulnerabilities as referenced in the 202611stable-channel-update-for-desktop advisory. - Use after free in TabStrip. CVE-2026-121114, CVE-2026-121257 - Missing...

RHEL 8 : kernel (RHSA-2026:94623)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:94623 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: free inetopt and ireqopt after a...

Linux Distros Unpatched Vulnerability : CVE-2026-99265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/openclose: keep the lock in iopipefixed iopipefixed installs both ends of the pipe in the fixed file table, drops -uringlock, and copies the slot number...

EulerOS Virtualization 2.13.0 : grub2 (EulerOS-SA-2026-1628)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandl...

RHEL 9 : RHEL AI 3.4 RPM runtime CVE fix - thrift (Important) (RHSA-2026:94503)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94503 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

Oracle Linux 9 : kernel (ELSA-2026-93930)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93930 advisory. - ethtool: cmis: require exact CDB reply length CKI Backport Bot RHEL-229677 CVE-2026-63996 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-114418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - phodav - None CVE-2026-114418 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, In...

Linux Distros Unpatched Vulnerability : CVE-2026-102703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. A common access pattern is a batc...

Linux Distros Unpatched Vulnerability : CVE-2026-121393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort clients built with verbose WinPR assertio...

RHEL 9 : bind9.18 (RHSA-2026:94278)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94278 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which...

Fedora 44 : glib-networking (2026-f9c9c98abe)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f9c9c98abe advisory. Fixes CVE-2026-103963 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:4956-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4956-1 advisory. This update for docker rebuilds it against the current go security release. Tenable has extracted the preceding...

CVE-2026-63500: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/schemas/dfiq.py accepts an unvalidated uuid from DFIQ YAML through POST /api/v2/dfiq/fromyaml, and core/web/apiv2/dfiq.py later interpolates that stored value...

CVE-2026-121038: Google Chrome: Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain…

Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-89229: vivo BlueLM Copilot: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM…

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in the ShareActivity component of BlueLM Copilot com.vivo.ai.copilot allows a malicious application installed on the same device to write arbitrary files via a crafted ACTIONSEND intent with a ContentProvider-supplied fi...

Photon OS 5.0: Gnuplot PHSA-2026-5.0-91-0947

An update of the gnuplot package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0947. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Gzip PHSA-2026-5.0-92-0975

An update of the gzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0975. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-97350: Securepoint Securepoint SSL VPN Client v2: Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy…

Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy settings that allow non-privileged local users to influence operations performed with NT AUTHORITY\SYSTEM privileges. Two attack vectors have been identified: Improper authorizati...