RHEL 9 : cockpit (RHSA-2026:94533)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94533 advisory. Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic...

Linux Distros Unpatched Vulnerability : CVE-2026-99260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: fix resident conversion in ntfsnewattrflags When setting sparse/compressed flags on a resident attribute, the function skipped the resident-to-non-residen...

AlmaLinux 8 : bind9.16 (ALSA-2026:94011)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:94011 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 bind: BIND: Denial of Service via unbounded processing of crafted DNS...

Rocky Linux 8 [CIQ] Security Update: perl / perl-Algorithm-Diff / perl-Archive-Tar / perl-Archive-Zip / etc (crlsa-2026_85917)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685917 advisory. URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization CVE-2026-19953 Tenable has extracted the preceding...

Oracle Linux 9 : glib2 (ELSA-2026-0936)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0936 advisory. 2.68.4-18.1 - Add patch for CVE-2025-13601 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

RHEL 8 : raptor2 (RHSA-2026:94519)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:94519 advisory. Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security...

Photon OS 5.0: Python3 PHSA-2026-5.0-90-0827

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0827. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : freerdp (RHSA-2026:94510)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94510 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Linux Distros Unpatched Vulnerability : CVE-2026-121405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory...

Linux Distros Unpatched Vulnerability : CVE-2026-119025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows an...

Linux Distros Unpatched Vulnerability : CVE-2026-99246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: protect node reset trace dump with node lock The tipcnoderesetlinks trace event asks tipcnodedump to walk the node's link entries. Unlike the other node...

Linux Distros Unpatched Vulnerability : CVE-2026-99244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pidnamespace: prevent TIFNOTIFYSIGNAL from interrupting the reaper Since commit 7fea700e04bd zappidnsprocesses: clear TIFNOTIFYSIGNAL along with TIFSIGPENDING...

Linux Distros Unpatched Vulnerability : CVE-2026-120831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libslirp in ifoutput. When moving a session from the fast queue to the batch queue, the code unlinked and reinserted an arbitrary packet via...

EulerOS Virtualization 2.13.1 : curl (EulerOS-SA-2026-1635)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification...

RockyLinux 8 : wireshark (RLSA-2026:93627)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:93627 advisory. wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector CVE-2026-95387 Tenable has extracted the preceding description block...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1793696855)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793696855 advisory. - Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of ...

Oracle Linux 10 : dpdk (ELSA-2026-94630)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-94630 advisory. 25.11-2 - Backport fixes for CVE-2026-86846 CVE-2026-86848 CVE-2026-86561 CVE-2026-86562 CVE-2026-86563 CVE-2026-86567 CVE-2026-86566 CVE-2026-86849...

Fedora 45 : python-pillow (2026-be73b9861d)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-be73b9861d advisory. Backport fix for CVE-2026-112900. ---- Backport fix for CVE-2026-112398 ---- Backport fix for CVE-2026-112393. ---- Backport fix for CVE-2026-112892...

SUSE SLES15 Security Update : rootlesskit (SUSE-SU-2026:5035-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:5035-1 advisory. This update for rootlesskit rebuilds it against the current go security release. Tenable has extracted the preceding description block...

Kibana 8.10.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 Information Disclosure (ESA-2026-204)

The version of Kibana installed on the remote host is 8.10.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-204 advisory. - Insertion of Sensitive Information Into Sent Data CWE-201 in Kibana...