SUSE SLED15 / SLES15 Security Update : python-Authlib (SUSE-SU-2026:4111-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4111-1 advisory. This update for python-Authlib fixes the following issue: - CVE-2026-41479: crafted authorization requests with...

RockyLinux 10 : python-tornado (RLSA-2026:67147)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67147 advisory. tornado: Tornado: Information disclosure via improper handling of credentials during HTTP redirects CVE-2026-49853 tornado: Tornado: Denial of Service...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Konsole vulnerability (USN-8752-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8752-1 advisory. It was discovered that Konsole incorrectly handled certain URLs under specific circumstances. A remote attacker could possibly...

RHEL 10 : .NET 10.0 (RHSA-2026:67530)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67530 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

Oracle Linux 10 : ELSA-2026-67280-0: / postgresql18 (ELSA-2026-672800)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-672800 advisory. - Fix CVE-2026-18408 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Linux Distros Unpatched Vulnerability : CVE-2026-90792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box...

Google Chrome < 153.0.8010.47 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 153.0.8010.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0541751186 advisory. - Use after free in Workers in Google Chrome prior to 153.0.8010.47...

Oracle Linux 9 : ELSA-2026-67150-0: / kernel (ELSA-2026-671500)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671500 advisory. - dm-verity: fix buffer overflow in FEC calculation Benjamin Marzinski RHEL-244958 CVE-2026-72098 - mm/khugepaged: write all dirty file folios when...

AlmaLinux 10 : rsync (ALSA-2026:67463)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67463 advisory. rsync: rsync 2.3.3 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 rsync: rsync: TLS Certificate Validation Bypass allows...

SUSE SLES12: java-1_8_0-ibm / java-1_8_0-ibm-alsa / java-1_8_0-ibm-devel / etc (SUSE-SU-2026:4107-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4107-1 advisory. Update to Java 8.0 Service Refresh 8 Fix Pack 71 bsc1277833: - CVE-2026-8400: flaw in the ORB component may allow a malicious IIOP...

Linux Distros Unpatched Vulnerability : CVE-2026-91956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's funcgetepdesc function that indexes interface arrays by position...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libvips vulnerability (USN-8755-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8755-1 advisory. It was discovered that libvips incorrectly handled specially crafted TIFF images when saving them as HEIF images. An attacker...

Fedora 45 : rubygems (2026-9831a751e2)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9831a751e2 advisory. Update rubygems to 4.0.20. Additionally, several security issues were found in resolv gem bundled in rubygems. This update resolves these issues by...

MiracleLinux 9 : kernel-5.14.0-687.33.1.el9_8 (AXSA:2026-1817:79)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1817:79 advisory. kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 kernel: tipc: fix double-free in tipcbufappend CVE-2026-52993 kernel: net:...

Linux Distros Unpatched Vulnerability : CVE-2026-90610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box...

RockyLinux 8 : perl (RLSA-2026:67162)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67162 advisory. perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 Tenable has extracted the preceding description block directly...

Ubuntu 26.04 LTS : dracut vulnerability (USN-8758-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8758-1 advisory. It was discovered that dracut did not properly shell-quote messages written by the die function to the emergency hook directory. An attacker on the adjacent netwo...

RHEL 9 : .NET 9.0 (RHSA-2026:67614)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67614 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

Linux Distros Unpatched Vulnerability : CVE-2026-91964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with...

Fedora 45 : sblim-sfcb (2026-d613369130)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d613369130 advisory. Fix CVE-2026-73583 and CVE-2026-73584 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...