Linux Distros Unpatched Vulnerability : CVE-2026-108978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie:...

EulerOS 2.0 SP11 : open-iscsi (EulerOS-SA-2026-4350)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow vulnerability exists in the idbmrecinfoconfig function in open-iscsi iscsi- initiator-utils. An attacker can craft a...

Amazon Linux 2 : gimp (ALASGIMP-2026-021)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-021 advisory. A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not...

Oracle Linux 9 : compat-openssl11 (ELSA-2026-80514)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-80514 advisory. - Fixes CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-265517 Tenable has extracted the preceding...

RHEL 8 : compat-openssl10 (RHSA-2026:80510)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:80510 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is...

EulerOS 2.0 SP13 : libXfont2 (EulerOS-SA-2026-4058)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...

Rocky Linux 9 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_77396)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202677396 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block direct...

Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_79281)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202679281 advisory. glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791 glibc: glibc: Process abort due to invalid memory in wordexp...

EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2026-4159)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

EulerOS 2.0 SP13 : open-iscsi (EulerOS-SA-2026-4075)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open- iscsi allows remote MITM attackers to...

Oracle Linux 8 : compat-openssl10 (ELSA-2026-80510)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-80510 advisory. 1:1.0.2o-4.4 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Tenable has extracted the preceding description block directl...

Amazon Linux 2023 : libX11, libX11-common, libX11-devel (ALAS2023-2026-3179)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3179 advisory. A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap. CVE-2026-88806 Tenable has extracted the preceding description block...

TencentOS Server 3: 389-ds:1.4 (TSSA-2026:1144)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1144 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

ALSA-2026:80798 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc: Fi...

TencentOS Server 3: gzip (TSSA-2026:1117)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1117 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

EulerOS 2.0 SP13 : libssh2 (EulerOS-SA-2026-4065)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a par...

RHEL 10 : gd (RHSA-2026:80500)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:80500 advisory. GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other...

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2026-4236)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server:...

TencentOS Server 3: glib2 (TSSA-2026:1126)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1126 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EulerOS 2.0 SP13 : wget (EulerOS-SA-2026-4205)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that...