Oracle Linux 9 : dovecot (ELSA-2026-41905)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-41905 advisory. 1:2.3.16-18.1 - fix CVE-2026-42006: IMAP parser listcountlimit bypass via open parentheses RHEL-188468 Tenable has extracted the preceding description block...

Amazon Linux 2 : glib2, --advisory ALAS2-2026-3803 (ALAS-2026-3803)

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3803 advisory. A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file when...

AlmaLinux 10 : c-ares (ALSA-2026:42096)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:42096 advisory. c-ares: c-ares: Use-after-free / double-free in query-completion handling CVE-2026-33630 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : webkit2gtk3 (ELSA-2026-42088)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42088 advisory. 2.52.5-1 - Update to 2.52.5 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 9 : webkit2gtk3 (ELSA-2026-42062)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42062 advisory. 2.52.5-1 - Update to 2.52.5 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Oracle Linux 10 : cups (ELSA-2026-39302)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39302 advisory. 1:2.4.10-18 - RHEL-177945 CVE-2026-34980 cups: control character injection in option values Tenable has extracted the preceding description block directly fro...

AlmaLinux 10 : gstreamer1-plugins-good (ALSA-2026:36675)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:36675 advisory. gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow CVE-2026-53705 Tenable has extracted the preceding description...

Oracle Linux 9 : glib2 (ELSA-2026-42089)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-42089 advisory. - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing Tenable has extracted the preceding description block directly...

Oracle Linux 10 : plexus-utils (ELSA-2026-38514)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38514 advisory. 3.5.1-9 - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165336 Tenable has extracted the preceding description block directly...

Oracle Linux 10 : glib2 (ELSA-2026-42063)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-42063 advisory. - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : pacemaker (ELSA-2026-39322)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39322 advisory. - Fix integer overflows in remote message decompression code CVE-2026-10649 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 10 : sssd (ELSA-2026-41937)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41937 advisory. - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole Tenable has extracted the precedi...

Oracle Linux 8 : .NET / 8.0 (ELSA-2026-41901)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41901 advisory. 8.0.129-1.0.1 - Add support for Oracle Linux 8.0.129-1 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192464 Tenable has extracted t...

RHEL 10 : kernel (RHSA-2026:42919)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42919 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - zero...

RHEL 10 : glibc (RHSA-2026:42694)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42694 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-41894)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41894 advisory. 8.0.129-1.0.1 - Add support for Oracle Linux 8.0.129-1 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 8.0.128-2 - Reduce time...

RHEL 8 : kernel-rt (RHSA-2026:42550)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42550 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: RDMA/mana: Remove user triggerable WARNON in manaibcreateqprss CVE-2026-46117 kernel: Bluetooth: l2cap: Add missing chan lock in...

AlmaLinux 8 : kernel-rt (ALSA-2026:42550)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42550 advisory. kernel: RDMA/mana: Remove user triggerable WARNON in manaibcreateqprss CVE-2026-46117 kernel: Bluetooth: l2cap: Add missing chan lock in...

GHSA-WP74-JGXH-GV4Q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET HTTP client System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service...