RockyLinux 9 : podman (RLSA-2026:69961)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69961 advisory. podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 podman: golang net/url: Denial of Service from quadratic...

RHEL 9 : containernetworking-plugins (RHSA-2026:70391)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:70391 advisory. The Container Network Interface CNI project consists of a specification and libraries for writing plug- ins for configuring network...

RockyLinux 9 : openexr (RLSA-2026:69608)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69608 advisory. OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files CVE-2026-68515 Tenable has extracted the preceding description block directly fr...

MiracleLinux 9 : openssh-9.9p1-11.el9_8.ML.1 (AXSA:2026-1891:11)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1891:11 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to...

Oracle Linux 9 : containernetworking-plugins (ELSA-2026-70391)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-70391 advisory. - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-56862 CVE-2026-56860 CVE-2026-33818 Tenable has extracted the preceding description block directl...

RHEL 9 : glib2 (RHSA-2026:70636)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70636 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, th...

Oracle Linux 9 : runc (ELSA-2026-70191)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-70191 advisory. - rebuild for CVE-2026-56860 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

MiracleLinux 9 : postgresql-13.23-6.el9_8 (AXSA:2026-1893:09)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1893:09 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL:...

Oracle Linux 9 : podman (ELSA-2026-69961)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69961 advisory. - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730...

RHEL 9 : postgresql:16 (RHSA-2026:70559)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70559 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

MiracleLinux 9 : rsyslog-8.2510.0-2.el9_8.2 (AXSA:2026-1896:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1896:03 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description...

Oracle Linux 9 : openssh (ELSA-2026-69130)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69130 advisory. - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245416 -...

PT-2026-97585

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.3.0 RabbitMQ versions prior to 4.2.6 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 3.13.15 Description An authenticated AMQP 0-9-1 client with publish permissions ca...

PT-2026-97566

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.2.7 RabbitMQ versions prior to 4.3.1 Description An authenticated AMQP 0-9-1 client can crash the Erlang VM, affecting all vhosts and connections, by sending approximately 1 million requests. The issue occurs when...

RHEL 9 : postgresql:15 (RHSA-2026:70762)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70762 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

PT-2026-105064

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against max message size. The size check ran only when assembly completed. By declaring body size = 2^63-1 and then streami...

CVE-2026-67235: Allocation of Resources Without Limits or Throttling

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against maxmessagesize. The size check ran only when assembly completed. By declaring bodysize = 2^63-1 and then streaming...

RockyLinux 9 : containernetworking-plugins (RLSA-2026:70391)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70391 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial o...

AlmaLinux 9 : runc (ALSA-2026:70191)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:70191 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 Tenable has extracted the preceding description blo...

Oracle Linux 9 : rsyslog (ELSA-2026-69540)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69540 advisory. - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246641 Tenable has extracted the preceding description block directl...