Linux Distros Unpatched Vulnerability : CVE-2026-104786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - squid - None Ubuntu Linux - security update CVE-2026-104786 Note that Nessus relies on the presence of the package as reported by the vendor...

Rocky Linux 10.2 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_85930)

The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685930 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS pro...

Linux Distros Unpatched Vulnerability : CVE-2026-99250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - printk: Postpone kthread startup There have been various bug reports related to SMP systems hanging on boot. The reports vary but seem to have some overlap with...

Fedora 43 : radicale (2026-3bf33310f5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3bf33310f5 advisory. Update to 3.9.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

RHEL 10 : freerdp (RHSA-2026:94514)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94514 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Kibana 8.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 (ESA-2026-229)

The version of Kibana installed on the remote host is 8.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-229 advisory. - The system certificate authority CA store in Red Hat products, distributed via...

RHEL 10 : fence-agents (RHSA-2026:94501)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94501 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

Oracle Linux 8 : kernel (ELSA-2026-93436)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93436 advisory. - ipv4: free inetopt and ireqopt after an RCU grace period Davide Caratti RHEL-295615 CVE-2026-98432 - smb: client: bound dirent name against end of S...

FreeBSD : hurl -- multiple vulnerabilities (339bd17a-d6fc-11f1-97dc-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 339bd17a-d6fc-11f1-97dc-40b034429ecf advisory. Hurl project reports: Security Issues Fixed: Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-121424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to redirect recipients by ending...

Linux Distros Unpatched Vulnerability : CVE-2026-120060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server- supplied row count in a size subtraction that can underflow...

Photon OS 5.0: Apache PHSA-2026-5.0-91-1006

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1006. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 44 : radicale (2026-5a704586a7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5a704586a7 advisory. Update to 3.9.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-99261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction It fixes both the move overflow and the eviction fence add for evicting these per-vm...

Photon OS 5.0: Acl PHSA-2026-5.0-91-0960

An update of the acl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLES15 Security Update : kernel RT (Live Patch 20 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4960-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4960-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.75 fixes various security issues: The following security issues were fixed: -...

RockyLinux 10 : util-linux (RLSA-2026:93461)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:93461 advisory. util-linux: TOCTOU in the mount program when setting up loop devices CVE-2026-27456 util-linux: util-linux: heap use-after-free in libblkid nested...

CentOS Linux 7 [TuxCare] Security Update: libXrender / libXrender-devel (CENTOS7:CLSA-2026:1793351077)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793351077 advisory. - A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X...

RHEL 8 : bind9.16 (RHSA-2026:94277)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94277 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

FreeBSD : py-pdfminer.six -- Arbitrary Code Execution in pdfminer.six via Crafted PDF Input (fa433f05-c217-11f0-82ac-901b0edee044)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fa433f05-c217-11f0-82ac-901b0edee044 advisory. Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if provid...