AlmaLinux 10 : tomcat update (Medium) (ALSA-2026:69259)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69259 advisory. Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 tomcat-coyote: Apache Tomcat: Authentication...

AlmaLinux 10 : rsyslog (ALSA-2026:69541)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69541 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description bloc...

AlmaLinux 8 : libxml2 (ALSA-2026:69655)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69655 advisory. libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 Bug Fixes and Enhancements: libxml2: CVE-2025-9714 fi...

RHEL 10 : Red Hat JBoss Enterprise Application Platform 8.1.8 (RHSA-2026:70230)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70230 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release...

SUSE SLES15 Security Update : google-guest-agent (SUSE-SU-2026:4270-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4270-1 advisory. - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header...

Ubuntu 26.04 LTS : Linux kernel (NVIDIA BaseOS) vulnerabilities (USN-8800-1)

"The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8800-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

RHEL 9 : redis (RHSA-2026:69861)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69861 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pillow (UTSA-2026-090127)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090127 advisory. Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c. Tenable has extracted the preceding description block directly from the Unity Linux...

RHEL 9 : postgresql:15 (RHSA-2026:69914)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69914 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000535 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. Tenable has extracted the preceding description block directly from the Unity Linux securi...

RockyLinux 9 : openssh (RLSA-2026:69130)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69130 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...

RockyLinux 9 : kernel (RLSA-2026:67470)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67470 advisory. kernel: vhost: move vdpa group bound check to vhostvdpa CVE-2026-43248 kernel: security/keys: fix missed RCU read section on lookup CVE-2026-64015 kerne...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups (UTSA-2026-091448)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091448 advisory. A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bluez (UTSA-2026-090077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090077 advisory. Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mutt (UTSA-2023-002883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002883 advisory. Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 1.5.2 2.2.12 Tenable has extracted the preceding description block...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-002120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002120 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2023-001571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001571 advisory. zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that ca...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003825 advisory. Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affect...

RHEL 8 : tar (RHSA-2026:70390)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:70390 advisory. The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fixes: tar: Tar path traversal...

RHEL 8 : postgresql:16 (RHSA-2026:69876)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69876 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...