Fedora 44 : evolution (2026-99a4ff5552)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-99a4ff5552 advisory. Add a patch to validate clickable preview elements in the Mail. Fixes CVE-2026-88859. Tenable has extracted the preceding description block directly from the...

Fortinet Fortigate 7.2.x / 7.4.x < 7.6.0 NULL Pointer Dereference in httpsd (FG-IR-26-173)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-173 advisory. - A NULL Pointer Dereference vulnerability CWE-476 in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow a...

MiracleLinux 9 : libsoup-2.72.0-16.el9_8.3 (AXSA:2026-1872:12)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1872:12 advisory. SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service CVE-2026-15709 libsou...

MiracleLinux 9 : unbound-1.24.2-3.el9_8.6 (AXSA:2026-1876:12)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1876:12 advisory. unbound: Unbound: DNS cache poisoning via UDP source port predictability CVE-2026-50252 Tenable has extracted the preceding description block directly from t...

MiracleLinux 9 : [security - high] postgresql:16 (AXSA:2026-1882:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1882:01 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL:...

Oracle Linux 9 : perl-Net-DNS (ELSA-2026-68786)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68786 advisory. - Fix CVE-2026-81928: Unbounded recursion when re-encoding message with misplaced TSIG Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 : perl-Net-DNS (ELSA-2026-68787)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-68787 advisory. - Fix unbounded recursion in TSIG record processing CVE-2026-81928 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Business Intelligence Enterprise Edition (September 2026 CSPU)

The version of Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics...

Amazon Linux 2 : kernel (ALAS-2026-3929)

The version of kernel installed on the remote host is prior to 4.14.355-284.746. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3929 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardhead...

EulerOS Virtualization 2.11.1 : ca-certificates (EulerOS-SA-2026-3406)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

EulerOS Virtualization 2.11.1 : glibc (EulerOS-SA-2026-3417)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failu...

EulerOS Virtualization 2.12.1 : samba (EulerOS-SA-2026-3618)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers tha...

EulerOS Virtualization 2.12.0 : dracut (EulerOS-SA-2026-3636)

According to the versions of the dracut packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted...

EulerOS Virtualization 2.12.0 : glibc (EulerOS-SA-2026-3640)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the...

EulerOS Virtualization 2.11.0 : samba (EulerOS-SA-2026-3558)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Upstream Security Advisories: https://www.samba.org/samba/security/CVE-2007-2447.html...

EulerOS Virtualization 2.12.1 : openssl (EulerOS-SA-2026-3602)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a...

EulerOS Virtualization 2.12.1 : unbound (EulerOS-SA-2026-3623)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unboun...

EulerOS Virtualization 2.12.0 : curl (EulerOS-SA-2026-3634)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw in curl's cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check...

EulerOS Virtualization 2.12.0 : glib2 (EulerOS-SA-2026-3639)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c fil...

Linux Distros Unpatched Vulnerability : CVE-2026-93395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing lower-bound validation in the bsonnewfrombuffer function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. T...