Fedora 45 : open62541 (2026-3fd073ad5b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3fd073ad5b advisory. Update to 1.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

RHEL 10 : tesseract (RHSA-2026:67830)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67830 advisory. A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It wa...

AlmaLinux 8 : tesseract (ALSA-2026:67832)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67832 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-89974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-fc: fix double free of fabrics options when nvmeaddctrl fails nvmfcreatectrl owns the fabrics options and frees them whenever -createctrl returns an error,...

TencentOS Server 4: webkitgtk (TSSA-2026:1014)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1014 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-89907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: KVM: Validate MSI data before routing it to EIOINTC pchmsisetirq passes e-msi.data straight into eiointcsetirq as the irq number. The MSI data comes...

SUSE SLES15: libpython3_9-1_0 / python39 / python39-base / python39-curses / etc (SUSE-SU-2026:4174-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4174-1 advisory. Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when t...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Suricata-Update vulnerability (USN-8766-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8766-1 advisory. Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded...

Linux Distros Unpatched Vulnerability : CVE-2026-89889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: i2c: imx415: Release runtime PM reference on VBLANK error The VBLANK path returned immediately when programming VMAX failed after pmruntimegetifinuse had...

Linux Distros Unpatched Vulnerability : CVE-2026-91840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - network-manager-vpnc - None Ubuntu Linux - username newline injection reaches a root password helper CVE-2026-91840 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2026-89883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: rc: sunxi-cir: Unregister rc device on probe failure After rcregisterdevice succeeds, later probe failures must undo the registration with...

Linux Distros Unpatched Vulnerability : CVE-2026-89943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: loongson: Fix error handling in ACPI property parsing In loongsoncardparseacpi, the return value of devicepropertyreadstring for the codec-dai-name proper...

GitLab 18.11 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-16794)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticate...

Linux Distros Unpatched Vulnerability : CVE-2026-89912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save MAPC with V=0 drops ite-collection but leaves the ITE on the device's ITT list, and...

Fedora 44 : python-jwcrypto (2026-8caad572b0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8caad572b0 advisory. Low severity security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Linux Distros Unpatched Vulnerability : CVE-2026-89796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series mm/damon: unurgent fixes for infinite loop, NULL de-ref and races, v1.1. Sashiko...

RHEL 8 : python-lxml (RHSA-2026:67943)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67943 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Linux Distros Unpatched Vulnerability : CVE-2026-89804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau/dmem: fix mismatched DMA unmap size for large folios Device-private THP migration maps migration buffers with pagesize and records that length in...

Linux Distros Unpatched Vulnerability : CVE-2026-89902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: Avoid preempt count underflow without probe LoongArch uses break 11 for the breakpoint placed after an instruction that Kprobes executes out of line...

TencentOS Server 4: grafana (TSSA-2026:1004)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1004 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...