Fedora 43 : libwebsockets (2026-59fdef3e5f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-59fdef3e5f advisory. Update to 4.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

RHEL 8 : freerdp (RHSA-2026:46384)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:46384 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

Siemens SIMATIC S7-1500 CPU 1518 MFP Infinite Loop (CVE-2024-56703)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505856; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

RHEL 8 : tigervnc (RHSA-2026:46382)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:46382 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

MiracleLinux 9 : tomcat-9.0.117-1.el9_8 (AXSA:2026-1349:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1349:05 advisory. tomcat: Apache Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 Tenable has extracted the preceding description...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-31507)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505701; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Xerox Phaser 4622 Out-of-bounds Write (CVE-2021-37354)

Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub3226AC via the TIMEZONE variable. This vulnerability allows attackers to cause a Denial of Service DoS via crafted overflow data. This plugin only works with Tenable.ot. Please visit...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2003)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2003 advisory. In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has...

Fedora 43 : skopeo (2026-4d9a2870e5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4d9a2870e5 advisory. Security fix for CVE-2026-27145 Go stdlib crypto/x509 DoS vulnerability. Rebuild with golang-1.25.12 which includes the fix. Tenable has extracted the...

RHEL 8 : libreoffice (RHSA-2026:46387)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:46387 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-71265)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505777; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

RHEL 10 : go-fdo-server (RHSA-2026:46395)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:46395 advisory. This package provides a server-side implementation of the FIDO Device Onboard FDO specification, written in Go. FDO is an open standard fo...

Critical Photon OS Security Update - PHSA-2026-5.0-0931

Updates of 'harfbuzz', 'linux-esx', 'linux' packages of Photon OS have been released...

RHEL 9 : freerdp (RHSA-2026:46383)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:46383 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

MiracleLinux 9 : valkey-8.0.9-1.el9_8 (AXSA:2026-1342:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1342:03 advisory. redis: use-after-free in unblock client flow may allow remote code execution CVE-2026-23479 redis: Remote code execution via use-after-free in Lua...

RHEL 8 : freerdp (RHSA-2026:46389)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:46389 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

MiracleLinux 9 : postfix-3.5.25-3.el9_8 (AXSA:2026-1346:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1346:03 advisory. postfix: buffer over-read via malformed enhanced status code CVE-2026-43964 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : 389-ds-base-2.8.0-7.el9_8 (AXSA:2026-1353:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1353:04 advisory. 389-ds-base: 389-ds-base: unbounded LDAP controls count in getldapmessagecontrolsext causes CPU and heap amplification remote DoS CVE-2026-9064 Tenable has...

openSUSE 16: java-17-openjdk / java-17-openjdk-demo / java-17-openjdk-devel / etc (openSUSE-SU-2026:21440-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21440-1 advisory. This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 July 2026 CPU - CVE-2026-41254: Information...

MiracleLinux 9 : redis:7 (AXSA:2026-1347:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1347:01 advisory. redis: use-after-free in unblock client flow may allow remote code execution CVE-2026-23479 redis: Remote code execution via use-after-free in Lua...