RockyLinux 9 : libXi (RLSA-2026:93439)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:93439 advisory. libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION...

Google Chrome < 156.0.8078.88 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 156.0.8078.88. It is, therefore, affected by a vulnerability as referenced in the 202611extended-stable-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the...

AlmaLinux 9 : kernel (ALSA-2026:93930)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93930 advisory. kernel: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES CVE-2026-63987 kernel: ethtool: cmis: require exact CDB reply length...

CentOS Linux 7 [TuxCare] Security Update: mariadb / mariadb-bench / mariadb-devel / mariadb-embedded / etc (CENTOS7:CLSA-2026:1793306829)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793306829 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRA...

SUSE SLES15 Security Update : buildah (SUSE-SU-2026:4955-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4955-1 advisory. This update for buildah rebuilds it against the current go security release. Tenable has extracted the preceding description block directly...

Photon OS 5.0: Python3 PHSA-2026-5.0-90-0802

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-99262: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/timeout: don't lose a cancel as io-wq arms…

In the Linux kernel, the following vulnerability has been resolved: iouring/timeout: don't lose a cancel as io-wq arms a timeout An IORINGOPTIMEOUT run by io-wq, because of IOSQEASYNC, has the same problem as poll, futex and waitid. iowqsubmitwork looks at IOWQWORKCANCEL once, before it issues th...

Photon OS 5.0: Linux PHSA-2024-5.0-90-0407

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0407. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 44 : libsoup3 (2026-f06a7887af)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f06a7887af advisory. Fixes a few CVEs: - CVE-2026-102560 - CVE-2026-102559 - CVE-2026-102558 - CVE-2026-102555 - CVE-2026-102556 - CVE-2026-102557 - CVE-2026-85197 -...

Fedora 44 : tpm2-tss (2026-efb1f85550)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-efb1f85550 advisory. Security GHSA-h664-qxhh-gx3w CVE-2026-109545 GHSA-2q8j-chww-3pcq CVE-ID requested GHSA-5mqr-9575-x89w CVE-ID requested GHSA-rjg6-phr3-3rxw CVE-ID requested...

CentOS Linux 7 [TuxCare] Security Update: rpcbind (CENTOS7:CLSA-2026:1793372385)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793372385 advisory. - A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large...

CentOS Linux 7 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS7:CLSA-2026:1793380078)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793380078 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c...

Linux Distros Unpatched Vulnerability : CVE-2026-99258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/hyperv: Avoid using per-cpu output page in hvapicidtovpindex hvapicidtovpindex currently uses the per-cpu hypercall input and output pages. This function is...

CentOS Linux 7 [TuxCare] Security Update: libdvdnav / libdvdnav-devel (CENTOS7:CLSA-2026:1793373587)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793373587 advisory. - libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnavdescribetitlechapters that allows attackers to read beyond the...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1793696855)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793696855 advisory. - Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a...

AlmaLinux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793725885)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793725885 advisory. - When an FTP wildcard LIST operation fails, libcurl omits the restoration path meant for successful listings, leaving the write...

Linux Distros Unpatched Vulnerability : CVE-2026-99248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix clk WARN flood The devres conversion replac...

Kibana 8.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 RCE (ESA-2026-238)

The version of Kibana installed on the remote host is 8.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-238 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google...

Fedora 43 : kernel (2026-81337e9cbe)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-81337e9cbe advisory. The 7.2.15 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Photon OS 5.0: Python3 PHSA-2026-5.0-90-0744

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0744. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...