Linux Distros Unpatched Vulnerability : CVE-2026-100140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability in the Qt XML parsing Qt5Compat / QXmlSimpleReader functionality of Qt. CVE-2026-100140 Note that Nessus relies on the presenc...

Photon OS 5.0: Glibc PHSA-2026-5.0-92-0857

An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0857. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 9 : libXi-1.7.10-8.el9_8.1 (AXSA:2026-2226:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2226:02 advisory. libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser CVE-2026-93543 Tenable has extracted the preceding description block directly from...

AlmaLinux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793631900)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793631900 advisory. - OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify- Class replaces an existi...

Linux Distros Unpatched Vulnerability : CVE-2026-99239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: refuse l2capchanadd if chan already has conn l2capchan may be linked to l2capconn at most once. This is assumed in several places, eg...

Photon OS 5.0: Dotnet PHSA-2026-5.0-91-1014

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Rabbitmq PHSA-2026-5.0-91-0978

An update of the rabbitmq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0978. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Rocky Linux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793631900)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793631900 advisory. - OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify- Class replaces an...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150073 advisory. Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authorization headers on cross-origin redirects, but d...

Photon OS 5.0: Python3 PHSA-2025-5.0-90-0534

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0534. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-99229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/wait: don't spin on a stuck overflow list As long as IOCHECKCQOVERFLOWBIT is set, iocqringwaitschedule returns right away, before it gets to look at...

Photon OS 4.0: Mysql PHSA-2026-4.0-1094

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1094. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 44 : retsnoop (2026-b020b6af45)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b020b6af45 advisory. Rebuild retsnoop with newer versions of the ruzstd fedora, epel10, epel9 and memmap2 fedora, epel10, epel10.3, epel10.2, epel9 crates to address multiple...

Fedora 45 : ruby (2026-f03a317854)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f03a317854 advisory. New version 4.0.9 is released. This new rpm contains several bug fixes in Onigumo regular expression compilation. Tenable has extracted the preceding...

Fedora 43 : kernel (2026-5643aa2228)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5643aa2228 advisory. The 7.2.14 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

RHEL 10 : libXi (RHSA-2026:93441)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93441 advisory. X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090...

Fedora 45 : rust-rpki (2026-11dd0fbebe)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-11dd0fbebe advisory. Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0285, RUSTSEC-2026-0346,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150105 advisory. The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all...

Photon OS 5.0: Vim PHSA-2026-5.0-91-0950

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0950. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-91-1001

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1001. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...