Linux Distros Unpatched Vulnerability : CVE-2026-90577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of th...

RHEL 10 : openssl (RHSA-2026:67154)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67154 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

Oracle Linux 10 : ELSA-2026-67156-0: / perl (ELSA-2026-671560)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671560 advisory. - Fixes: CVE-2026-13221 - regcompstudy: Don't create a trie that would overflow - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir Tenable has extract...

Linux Distros Unpatched Vulnerability : CVE-2026-90463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the sssd NSS responder. This input validation vulnerability allows a local attacker, by sending specially crafted service lookup requests to...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2026-2149)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2149 advisory. An Envoy proxy handling HTTP/3 connections can dereference a null transport socket option during the selection of a connection pool. This null pointer dereference is a CWE-476 flaw that may...

RHEL 9 : git-lfs (RHSA-2026:67319)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67319 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...

Linux Distros Unpatched Vulnerability : CVE-2026-87106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory...

RHEL 8 : git-lfs (RHSA-2026:67161)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67161 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...

AlmaLinux 8 : glib2 (ALSA-2026:66451)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66451 advisory. xdgmime: heap-based buffer overflow in xdgmimemagicparsemagicline in xdgmimemagic.c CVE-2026-16118 Tenable has extracted the preceding description block directly...

AlmaLinux 8 : nodejs:24 (ALSA-2026:54371)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54371 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...

RHEL 10 : kernel (RHSA-2026:67277)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67277 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: sched: UAF via missing...

AlmaLinux 10 : libkcapi (ALSA-2026:67267)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67267 advisory. libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries CVE-2026-71225 libkcapi: Memory...

AlmaLinux 8 : nodejs:22 (ALSA-2026:54530)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54530 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...

Amazon Linux 2023 : bluez, bluez-cups, bluez-deprecated (ALAS2023-2026-2146)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2146 advisory. A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR...

Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2026-3922)

The version of gstreamer1-plugins-base installed on the remote host is prior to 1.18.4-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3922 advisory. GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability...

Amazon Linux 2 : webkitgtk4 (ALAS-2026-3917)

The version of webkitgtk4 installed on the remote host is prior to 2.52.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3917 advisory. A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.1...

Fedora 44 : perl-DBI (2026-195d764078)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-195d764078 advisory. 1.653 Fix test for 32bit-perl Fix arbitrary module and file loading via dbmtype/dbmmldbm CVE-2026-78030 Tighten symlink outside of fdir CVE-2026-153...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-2129)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2129 advisory. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such...

Oracle Linux 10 : ELSA-2026-67147-0: / python-tornado (ELSA-2026-671470)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671470 advisory. 6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247266 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Linux Distros Unpatched Vulnerability : CVE-2026-90678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QU...