PT-2026-68265

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.576 Jenkins LTS versions prior to 2.568.2 Description The project naming strategy configuration does not restrict the types of objects that can be instantiated. This allows users with Overall/Manage permissions to...

Oracle Linux 9 : osbuild-composer (ELSA-2026-49838)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-49838 advisory. 175-1.0.1 - Track github upstream Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 : php8.4 (ELSA-2026-49914)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49914 advisory. 8.4.23-1 - rebase to 8.4.23 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

MiracleLinux 8 : fence-agents-4.2.1-129.el8_10.28 (AXSA:2026-1462:13)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1462:13 advisory. urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44431 Tenable has extracted the preceding descripti...

GHSA-4WX2-7GVJ-QFQ3 Ghost: Archived Offers can be Redeemed

Impact A missing validation check allowed users to redeem subscription offers that were no longer active. Vulnerable versions This vulnerability is present in Ghost from v4.22.0 up to v6.54.0. Patches v6.54.1 contains a fix for this issue. How to update For self-hosters using Docker, find Docker'...

Important: pipewire

Issue Overview: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 Multiple unbounded alloca calls in the PulseAudio protocol server. CVE-2026-14330 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker t...

Important: vim

Issue Overview: Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of the edited buffer, into a search pattern that is run via winexecute without escapin...

MiracleLinux 9 : perl-IO-Compress-2.102-4.el9_8.1 (AXSA:2026-1440:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1440:02 advisory. perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob CVE-2026-48962 Tenable has extracted the preceding descripti...

RockyLinux 10 : gstreamer1-plugins-good (RLSA-2026:49508)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:49508 advisory. gstreamer: GStreamer: Arbitrary code execution via stack-based buffer overflow in qtdemux CVE-2026-5056 Tenable has extracted the preceding description block...

Fedora 43 : borgbackup (2026-5a13ef79cc)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5a13ef79cc advisory. new bugfix release, contains a fix for CVE-2026-62268 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Important: kernel-livepatch-6.1.176-221.367

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

Fedora 44 : seamonkey (2026-e024c08cad)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e024c08cad advisory. Update to 2.53.24 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Oracle Linux 7 : rsync (ELSA-2026-25172)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-25172 advisory. - Backport fix for CVE-2026-41035 Orabug: 39542074 - Fix CVE-2024-12087 Orabug: 38771262 Tenable has extracted the preceding description block directly from th...

Fedora 44 : borgbackup (2026-5cc233b0ea)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5cc233b0ea advisory. new bugfix release, contains a fix for CVE-2026-62268 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 43 : exim (2026-d6839a7c95)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d6839a7c95 advisory. This is new version fixing command execution with alternate privilege. Tenable has extracted the preceding description block directly from the Fedora securit...

Oracle Linux 8 : javapackages-tools:201801 (ELSA-2026-41948)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-41948 advisory. - Resolves: CVE-2019-10086, CVE-2025-48734 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Fedora 43 : lego (2026-256592dfe7)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-256592dfe7 advisory. Update to 5.3.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : nextcloud (2026-df06189438)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-df06189438 advisory. 34.0.2 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 43 : nasm (2026-9af234bcd6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9af234bcd6 advisory. Fixes for CVE-2026-6067 and CVE-2026-6068. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Fedora 44 : nodejs24 (2026-ce5dac2ed8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ce5dac2ed8 advisory. Update to version 24.18.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...