RockyLinux 9 : kernel (RLSA-2026:93412)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:93412 advisory. kernel: sctp: stream: fully roll back denied add-stream state CVE-2026-52929 kernel: ipv6: sit: reload inner IPv6 header after GSO offloads CVE-2026-532...

Fedora 45 : kernel (2026-7a0f444c64)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a0f444c64 advisory. The 7.2.15 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-112902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to TIFFSetField that do not match libtiff's definiti...

Photon OS 5.0: Etcd PHSA-2026-5.0-92-0975

An update of the etcd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0975. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1051

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1051. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 8 : qt5-qtbase (ELSA-2026-93924)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93924 advisory. - Fix CVE-2026-19248: unbounded recursion and ON2 behavior in QDom Resolves: RHEL-261130 Tenable has extracted the preceding description block directl...

RockyLinux 8 : python-jwt (RLSA-2026:93440)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:93440 advisory. pyjwt: PyJWT accepts unknown crit header extensions RFC 7515 ?4.1.11 MUST violation CVE-2026-32597 Tenable has extracted the preceding description block directly...

Fedora 44 : erlang-hex_core (2026-b300043748)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b300043748 advisory. hexcore ver. 0.21.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

Linux Distros Unpatched Vulnerability : CVE-2026-121407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdeskserverthread that allows authenticated clients to crash the proce...

CentOS Linux 7 [TuxCare] Security Update: emacs / emacs-common / emacs-el / emacs-filesystem / emacs-nox / etc (CENTOS7:CLSA-2026:1793361300)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793361300 advisory. - A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs...

RockyLinux 9 : thunderbird (RLSA-2026:93443)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:93443 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764 firefox...

Linux Distros Unpatched Vulnerability : CVE-2026-121441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 contains a request smuggling vulnerability in wasi-http that allows guests to set multip...

RHEL 8 : kernel (RHSA-2026:94303)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:94303 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: free inetopt and ireqopt after a...

CVE-2026-85033: zephyrproject zephyr: The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit state in a…

The AVRCP Target role in subsys/bluetooth/host/classic/avrcp.c keeps its vendor-dependent response transmit state in a per-connection object selected by connection index getavrcptg, with the per-transfer context tid, sentlen, and the BTAVRCPTGFLAGTXONGOING flag stored in the userdata of the queue...

Fedora 43 : barman / python-uv-build / ruff / rust-archive-trait / etc (2026-fa66e0fef2)

"The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-fa66e0fef2 advisory. Update uv and python-uv-build to version 0.13.5. This includes some breaking changes to uv but none to python-uv-build %NASLMINLEVEL 80900 C Tenable, Inc. T...

CentOS Linux 6 [TuxCare] Security Update: unzip (CENTOS6:CLSA-2026:1793350631)

The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793350631 advisory. - A heap-based buffer overflow exists in Info-Zip UnZip version = 6.00 in the processing of password- protected archives that allows an attacker ...

AlmaLinux 9.2 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793733350)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793733350 advisory. - A time-of-check to time-of-use TOCTOU race condition in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through...

Elasticsearch 8.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 DoS (ESA-2026-235)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-235 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in...

RockyLinux 8 : kernel (RLSA-2026:93414)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:93414 advisory. kernel: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Tenable has extracted the preceding description block directly from the RockyLinu...

Fedora 44 : zvbi (2026-055ec4753d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-055ec4753d advisory. Update to 0.2.46 Fixes CVE-2026-110654 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...