Oracle Linux 9 : ELSA-2026-67146-0: / python-tornado (ELSA-2026-671460)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671460 advisory. 6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281 Tenable has extracted the preceding description block directly from the Oracle Linux security...

tomcat11-11.0.25-1.1 on GA media (moderate)

tomcat11-11.0.25-1.1 on GA media Announcement ID: openSUSE-SU-2026:11761-1 Rating: moderate Cross-References: CVE-2026-65182 CVE-2026-65183 CVE-2026-65637 CVE-2026-65905 CVE-2026-65927 CVE-2026-66299 CVE-2026-66422 CVE-2026-68525 CVE-2026-68569 CVE-2026-68763 CVE-2026-73180 CVSS scores:...

Fedora 45 : elixir (2026-688dc4a890)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-688dc4a890 advisory. Elixir ver. 1.20.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : pdns-recursor (2026-6c1e0af917)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6c1e0af917 advisory. Update to 5.4.6 Resolves: rhbz2527899 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Linux Distros Unpatched Vulnerability : CVE-2026-89601

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext2: Fix lost inode updates for ISSYNC inodes ext2setsize and ext2xattrset2 had a construct like: if ISSYNCinode syncinodemetadatainode, 1 %NASLMINLEVEL 80900...

Fedora 43 : mingw-expat (2026-4a2ee61320)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4a2ee61320 advisory. Update to expat-2.8.4. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 43 : bluez (2026-6ed52ea50e)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6ed52ea50e advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-89773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dmstreamctx that should skip configuring HDCP routine. The...

GHSA-H8M9-JGF8-VWVP

creationtimestamp| type| source ---|---|--- 2026-09-11 22:32:02+00:00| seen| https://gist.github.com/alon710/43186f210d41aaa752fb23f70074de25 2026-09-12 00:01:14+00:00| seen| https://gist.github.com/alon710/43186f210d41aaa752fb23f70074de25...

CVE-2026-53952

creationtimestamp| type| source ---|---|--- 2026-09-11 20:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvbgfge4mw24 2026-09-11 22:02:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbkyb4rc62w 2026-09-11 22:07:55+00:00| seen|...

CVE-2026-87910

creationtimestamp| type| source ---|---|--- 2026-09-11 18:10:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gncnp22neuxiu 2026-09-14 14:00:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhrffde2c...

CVE-2026-3869

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...

CVE-2026-84387

creationtimestamp| type| source ---|---|--- 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r...

BIT-TOMCAT-2026-55957 Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind

Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password. This issue affects Apache Tomcat: from 11.0.0 through 11.0.4, from 10.1.0 through...

BIT-TOMCAT-2026-43513 Apache Tomcat: LockOutRealm treats user names as case-sensitive

Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.21, from 10.1.0 through 10.1.54, from 9.0.0 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also...

CVE-2026-89162

A flaw was found in PCRE2. The pcre2serializeencode function might disclose two bytes of information to an attacker. This vulnerability typically occurs in scenarios where the attacker already has unsafe access to the system, making exploitation difficult. The primary impact is a limited...

CVE-2026-16338

creationtimestamp| type| source ---|---|--- 2026-09-11 03:29:04+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7mrtrurl2y 2026-09-14 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pffm7d2t 2026-09-14 22:08:10+00:00| seen|...

Fedora 44 : bluez (2026-d4156b5fc5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4156b5fc5 advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : syncthing (2026-bd6debcfb6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bd6debcfb6 advisory. 2.1.3, fix for CVE-2026-40898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Fedora 45 : mingw-expat (2026-9e9244744d)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9e9244744d advisory. Update to expat-2.8.4. ---- Update to expat-2.8.3. Tenable has extracted the preceding description block directly from the Fedora security advisory...