Linux Distros Unpatched Vulnerability : CVE-2026-93709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler...

FreeBSD : p5-Dancer2 -- Multiple vulnerabilities (6690917c-b657-11f1-ad2b-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6690917c-b657-11f1-ad2b-40b034429ecf advisory. Dancer project reports: Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from...

RockyLinux 9 : grafana (RLSA-2026:54184)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:54184 advisory. grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads CVE-2026-42127 Tenable has extracted the preceding description blo...

SUSE SLES12 Security Update : google-guest-agent (SUSE-SU-2026:4272-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4272-1 advisory. - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. -...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: guava (UTSA-2023-002175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002175 advisory. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ppp (UTSA-2023-000026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000026 advisory. DISPUTED A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. Th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2026-091452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091452 advisory. During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: firefox (UTSA-2023-002130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002130 advisory. buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow. Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000530 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0246. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

RockyLinux 8 : postgresql:15 (RLSA-2026:69923)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69923 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitra...

Linux Distros Unpatched Vulnerability : CVE-2026-93676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak...

RockyLinux 10 : openssh (RLSA-2026:69129)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69129 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrec...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090650 advisory. In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, if the...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.1.8 (RHSA-2026:70228)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70228 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2023-001491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001491 advisory. ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-67549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, A crafted...

Oracle Linux 10 : rsyslog (ELSA-2026-69541)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69541 advisory. 8.2510.0-5.2 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246633 Tenable has extracted the preceding description...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090055)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090055 advisory. In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the erro...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nghttp2 (UTSA-2023-002139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002139 advisory. Envoy is a cloud-native high-performance edge/middle/service proxy. Envoys HTTP/2 codec may leak a header map and bookkeeping structures upon receiving RSTSTREAM...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000582 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436. Tenable has extracted the preceding description block directly from the Unity Linux securi...