Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : CivetWeb vulnerabilities (USN-8749-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8749-1 advisory. It was discovered that CivetWeb did not correctly handle parsing certain URIs. A remote attacker could...

Linux Distros Unpatched Vulnerability : CVE-2026-90804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function bfdelfwritesectionehframe of the file bfd/elf-eh-frame.c of the...

Debian dla-4779 : jbig2dec - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4779 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4779-1 [email protected] https://www.debian.org/lts/security/...

Amazon Linux 2023 : perl-Socket, perl-Socket-tests (ALAS2023-2026-2161)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2161 advisory. Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, packipmreqsource checks the length of its source argument before the argument is read, so the check tests the byte...

RHEL 10 : rsync (RHSA-2026:67463)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67463 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because...

RHEL 10 : libkcapi (RHSA-2026:67267)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67267 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...

MiracleLinux 9 : python-lxml-4.6.5-3.el9_8.1 (AXSA:2026-1823:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1823:01 advisory. lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href CVE-2026-49825 Tenable has extracted the preceding description block...

MiracleLinux 9 : gpsd-minimal-3.26.1-2.el9_8.2 (AXSA:2026-1819:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1819:03 advisory. gpsd: gpsd: Arbitrary OS command execution via code injection in gpsprof utility CVE-2026-60122 Tenable has extracted the preceding description block directl...

Linux Distros Unpatched Vulnerability : CVE-2025-45480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary. CVE-2025-45480 Note that Nessus relies ...

AlmaLinux 8 : libkcapi (ALSA-2026:67266)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67266 advisory. libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries CVE-2026-71225 libkcapi: Memory...

Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2026-137)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.39.1.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-137 advisory. An Envoy proxy handling HTTP/3 connections can dereference a null transport socket option during t...

Linux Distros Unpatched Vulnerability : CVE-2026-90573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component...

MiracleLinux 8 : glib2-2.56.4-178.el8_10 (AXSA:2026-1826:17)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1826:17 advisory. xdgmime: heap-based buffer overflow in xdgmimemagicparsemagicline in xdgmimemagic.c CVE-2026-16118 Tenable has extracted the preceding description block...

RHEL 10 : perl (RHSA-2026:67156)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67156 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl...

Linux Distros Unpatched Vulnerability : CVE-2025-56536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloa...

TencentOS Server 3: perl-DBI (TSSA-2026:1006)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1006 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Oracle Linux 8 : ELSA-2026-67161-0: / git-lfs (ELSA-2026-671610)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671610 advisory. 3.4.1-13 - Rebuild with new Golang - Resolves: RHEL-241521, RHEL-242322, RHEL-241889 Tenable has extracted the preceding description block directly...

Amazon Linux 2023 : libnetapi, libnetapi-devel, libsmbclient (ALAS2023-2026-2135)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2135 advisory. A flaw was found in samba's pamwinbind. When mkhomedir is enabled, pamwinbind chowns the target account's home directory without validating the path is not a critical system directory such as ...

Amazon Linux 2 : perl-YAML (ALAS-2026-3918)

The version of perl-YAML installed on the remote host is prior to 0.84-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3918 advisory. Backtracking leads to exponential load time in libyaml library. CVE-2026-63676 Tenable has extracted the preceding description blo...

Linux Distros Unpatched Vulnerability : CVE-2022-42917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing...