Fedora 43 : rust-rbspy (2026-7e6b0482ed)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7e6b0482ed advisory. Rebuild rbspy with newer versions of the ruzstd, memmap2, anyhow, and quick-xml crates to address multiple security vulnerabilities RUSTSEC-2026-0186,...

Photon OS 5.0: Dotnet PHSA-2026-5.0-92-1014

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Debian dla-4877 : thunderbird - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4877 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4877-1 [email protected]...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150090 advisory. Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are...

RHEL 9 : libXtst (RHSA-2026:93450)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93450 advisory. X.Org X11 libXtst runtime library Security Fixes: libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286 F...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0931

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0931. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 8 : firefox-153.5.0-1.el8_10.ML.1 (AXSA:2026-2224:30)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2224:30 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: thunderbird: Privilege escalation in the Application Update component...

Fedora 46 : python-robotframework (2026-5de0ec5cd8)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5de0ec5cd8 advisory. Automatic update for python-robotframework-7.5.1-1.fc46. Changelog Mon Nov 2 2026 Federico Pellegrin - 7.5.1-1 - Upgrade to 7.5.1 rhbz2548546 and...

Oracle Linux 10 : java-21-openjdk (ELSA-2026-90504)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90504 advisory. 1:21.0.13.0.9-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.13.0.9-1.2 - Bump release for PQC build 1:21.0.13.0.9-1.1 - Update to...

CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel (CENTOS7:CLSA-2026:1793202461)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793202461 advisory. - FreeRDP before 3.32.0 fails to close prior serial handles in serialprocessirpcreate, allowing a malicious RDP server to exhaust file descriptor...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0517

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0517. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : freerdp (ELSA-2026-93592)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93592 advisory. 2:2.11.7-7.9 - Backport several CVE fixes CVE-2026-109242, CVE-2026-110837, CVE-2026-111880 Resolves: RHEL-282296, RHEL-283722, RHEL-286609 Tenable ha...

Fedora 45 : rust-sequoia-git (2026-5bea395e51)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5bea395e51 advisory. Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities...

Rocky Linux 9 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_93072)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693072 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP messag...

CVE-2026-20576: MediaTek, Inc. MediaTek chipset: In afe, there is a possible out of bounds write due to a missing bounds check

In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920...

Debian dla-4878 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4878 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4878-1 [email protected]...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1014

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-12139: WSO2: The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters…

The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters under specific conditions. This allows end-users to manipulate the error messages that are displayed by the application. By exploiting this vulnerability, malicious actors can inject...

CVE-2026-106805: n/a: A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling

A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...

CVE-2026-106807: n/a: A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path

A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogspfcpxactremotecreate returns NULL, but the failure is not handled properly and leads to an ogsassertnew failure in ogspfcpxactreceive...