Adobe Substance 3D Designer <= 16.0.5 Multiple Vulnerabilities (APSB26-169)

The version of Adobe Substance 3D Designer installed on the remote host is prior or equal to 16.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-169 advisory. - Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in...

Linux Distros Unpatched Vulnerability : CVE-2026-111153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by...

MiracleLinux 8 : mod_auth_openidc:2.3 (AXSA:2026-2061:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2061:01 advisory. modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsing CVE-2026-54789 cjose: cjose: Heap buffer overflow in AES Key Wr...

MiracleLinux 9 : jackson-core-2.21.6-1.el9_8, jackson-databind-2.21.6-1.el9_8, jackson-jaxrs-providers-2.21.6-1.el9_8, jackson-modules-base-2.21.6-1.el9_8 (AXSA:2026-2065:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2065:01 advisory. com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing...

MiracleLinux 8 : OpenEXR-2.2.0-12.el8_10.3 (AXSA:2026-2069:07)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2069:07 advisory. OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files CVE-2026-59184 OpenEXR: OpenEXR: Heap out-of-bounds write via crafted tile...

CVE-2026-111153

Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chipflags 0x3F, opene...

PT-2026-115661

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, nanocoap accepts oversized CoAP Block2 option values without enforcing the 20-bit maximum block number, allowing block offset multiplication to overflow on...

MiracleLinux 9 : librabbitmq-0.11.0-7.el9_8.1 (AXSA:2026-2068:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2068:02 advisory. rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 Tenable has extracted the preceding description block directly from...

CVE-2026-111714: Inefficient Regular Expression Complexity

tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attackers to block visitor pages by supplying unescaped cookie names to cookie.purge. Attackers can plant a cookie from a sibling subdomain or inject a purgeBtn element with a...

UBUNTU-CVE-2026-111458

The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlenb64 + strlenhex + 31, but the format string "fan1:x509:server:passive:%s:sha256:%s" contains 33 fixed characters in...

Linux Distros Unpatched Vulnerability : CVE-2026-70186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-70186 Note that Nessus relies on the presence of the package a...

RockyLinux 10 : kernel (RLSA-2026:83207)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83207 advisory. kernel: netfilter: nfnetlinkqueue: do shared-unconfirmed check before segmentation CVE-2026-45859 kernel: net/sched: actct: Only release RCU read lock...

NetScaler ADC and NetScaler Gateway Memory Overflow (CTX697191 / CVE-2026-107406)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-64.29, or 14.1 prior or equal to 14.1-73.41, or 13.1-FIPS/NDcPP prior to 13.1-37.283, or 14.1-FIPS prior or equal to 14.1-73.41 FIPS. It is, therefore, affected by a vulnerabilit...

RockyLinux 9 : kernel (RLSA-2026:83156)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83156 advisory. kernel: net/sched: actct: Only release RCU read lock after ctft CVE-2026-46319 kernel: net/sched: taprio: fix use-after-free in advancesched on schedule...

Linux Distros Unpatched Vulnerability : CVE-2026-70196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-70196 Note that Nessus relies on the...

RockyLinux 8 : wireshark (RLSA-2026:83657)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83657 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...

Linux Distros Unpatched Vulnerability : CVE-2026-109924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client library for Node.js. In versions 6.5.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its EventSource client can be...

PT-2026-115919

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...

PT-2026-115909

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...

PT-2026-115921

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc info plugin could be confused by a query containing embedded null bytes. Reading information schema.query cache info after such a query was cached could...