Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

Photon OS 5.0: Lz4 PHSA-2025-5.0-0677

An update of the lz4 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0677. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid36591...

Oracle Linux 8 : hplip (ELSA-2026-82295)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82295 advisory. 3.26.6-3 - Fix LEDM scanning 3.26.6-2 - fix OSH issues 3.26.6-1 - Rebase to 3.26.6 Tenable has extracted the preceding description block directly from...

CVE-2026-54477

CVE-2026-54477: Admin Panel Missing Security Headers clickjacking / XSS Advisory Field| Value ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Medium Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...

Fedora 44 : python3.13 (2026-67c5f750b3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-67c5f750b3 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 44 : python3.11 (2026-f105922543)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f105922543 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Rocky Linux 9.6 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ciqsa-2026_1635)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261635 advisory. This advisory aggregates security fixes for the openssl SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2024-12797. Tenable has extracted the preceding description...

Fedora 43 : python3.13 (2026-1928c5d40b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1928c5d40b advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Rocky Linux 9.2 [CIQ] Security Update: WALinuxAgent / WALinuxAgent-cvm / WALinuxAgent-udev (ciqsa-2026_1619)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261619 advisory. This advisory aggregates security fixes for the WALinuxAgent SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2019-0804. Tenable has extracted the preceding descripti...

Fedora 43 : python3.11 (2026-37c784fc16)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-37c784fc16 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 44 : openvpn (2026-eed9c789d3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eed9c789d3 advisory. Update to upstream 2.7.8 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 43 : cockpit (2026-9ff25022c1)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9ff25022c1 advisory. Automatic update for cockpit-368-1.fc43. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

CVE-2023-5648

In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more...

PT-2026-107822

In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disclosure, and more...

Oracle Linux 10 : rust-sequoia-sq (ELSA-2026-76737)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-76737 advisory. - Update to 1.4.0 and fix CVE-2026-42784 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 9 : rust-rpm-sequoia (ELSA-2026-76733)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-76733 advisory. 1.10.2.1-1 - Rebase to 1.10.2 and sequioa-openpgp with fixes for CVE-2026-42784 Tenable has extracted the preceding description block directly from the Oracle...

Fedora 43 : python3.12 (2026-f30cb310f9)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f30cb310f9 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Slackware Linux 15.0 / current openssh Vulnerability (SSA:2026-279-01)

The version of openssh installed on the remote host is prior to 10.6p1. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-279-01 advisory. New openssh packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

Fedora 45 : python3-docs / python3.15 (2026-ab1400e97a)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ab1400e97a advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Oracle Linux 10 : nodejs22 (ELSA-2026-75864)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75864 advisory. 1:22.23.1-4.0.1 - Add c-ares as dependency orabug 39781219 Tenable has extracted the preceding description block directly from the Oracle Linux...