Linux Distros Unpatched Vulnerability : CVE-2026-99228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/io-wq: don't lose the signal that ends work When a thread exits, only its tracked requests are cancelled. Then its io-wq is torn down. iowqexitworkers...

Linux Distros Unpatched Vulnerability : CVE-2026-104066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150117 advisory. Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is...

Linux Distros Unpatched Vulnerability : CVE-2026-104063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pix...

Tanium Server 7.7.3.x < 7.7.3.8351 / 7.8.2.x < 7.8.2.1263 / 7.8.4.x < 7.8.4.1399 Multiple Vulnerabilities

The version of Tanium Server installed on the remote host is 7.7.3.x prior to 7.7.3.8351, 7.8.2.x prior to 7.8.2.1263, or 7.8.4.x prior to 7.8.4.1399. It is, therefore, affected by multiple vulnerabilities: - Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. This...

Linux Distros Unpatched Vulnerability : CVE-2026-99236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Reject incomplete event filter expressions A non-empty expression normally finishes in predicateparse's inner loop, which resolves the pending logical...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0521

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0521. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:94101)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:94101 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

Linux Distros Unpatched Vulnerability : CVE-2026-120066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with t...

Fedora 43 : retsnoop (2026-e06a56e9b6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e06a56e9b6 advisory. Rebuild retsnoop with newer versions of the ruzstd fedora, epel10, epel9 and memmap2 fedora, epel10, epel10.3, epel10.2, epel9 crates to address multiple...

Debian dla-4879 : charon-cmd - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4879 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4879-1 [email protected]...

CentOS Linux 6 [TuxCare] Security Update: xz / xz-devel / xz-libs / xz-lzma-compat (CENTOS6:CLSA-2026:1793265274)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793265274 advisory. - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for...

CentOS Linux 8.4 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS8.4:CLSA-2026:1793645109)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793645109 advisory. - OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing...

Photon OS 5.0: Python3 PHSA-2025-5.0-92-0688

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0688. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : libkcapi (RHSA-2026:93453)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93453 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150091 advisory. decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. Tenable has extracted the preceding description block directly from the Unity...

Linux Distros Unpatched Vulnerability : CVE-2026-120436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computin...

Oracle Linux 10 : podman (ELSA-2026-93464)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-93464 advisory. - update to the latest upstream commit aae8b839 - fixes CVE-2025-11395 Tenable has extracted the preceding description block directly from the Oracle Linux...

RHEL 7 : firefox (RHSA-2026:92363)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:92363 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0960

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...