openSUSE 16 Security Update : rav1e (openSUSE-SU-2026:21681-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21681-1 advisory. This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and...

TencentOS Server 2: 389-ds-base (TSSA-2026:0937)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0937 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

MiracleLinux 9 : nginx:1.24 nginx-1.24.0-7.module+el9+1189+6ef24322.4.ML.1 (AXSA:2026-1718:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1718:01 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

openSUSE 16 Security Update : python-sqlparse (openSUSE-SU-2026:21690-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21690-1 advisory. - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessiv...

TencentOS Server 4: xmlrpc-c (TSSA-2026:0877)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0877 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-18654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow...

Palo Alto GlobalProtect App MacOS 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h13 / 6.3.x < 6.3.3-h14 Multiple Vulnerabilities (Global Un-Protect)

The version of Palo Alto GlobalProtect App installed on the remote macOS host is 6.0.x prior to 6.0.15, 6.2.x prior to 6.2.8-h13, or 6.3.x prior to 6.3.3-h14. It is, therefore, affected by multiple vulnerabilities collectively known as Global Un-Protect: - Local privilege escalation vulnerabiliti...

Alibaba Cloud Linux 3 : 0261: grafana (ALINUX3-SA-2026:0261)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0261 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-33377: An Editor can overwrite a dashboard...

Linux Distros Unpatched Vulnerability : CVE-2026-82397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with...

TencentOS Server 2: postfix (TSSA-2026:0939)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0939 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 2: gnutls (TSSA-2026:0943)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0943 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

MiracleLinux 8 : pcp-5.3.7-22.el8_10.5 (AXSA:2026-1724:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1724:03 advisory. PCP: PCP linuxsockets PMDA: Arbitrary Command Execution via Command Injection CVE-2026-16524 PCP: PCP: Privilege escalation to root via linuxsockets...

Linux Distros Unpatched Vulnerability : CVE-2026-84127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155. CVE-2026-84127 Note that Nessus relie...

PT-2026-84137

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

Linux Distros Unpatched Vulnerability : CVE-2026-84120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2...

openSUSE 16: libudisks2-0 / libudisks2-0-devel / libudisks2-0_btrfs / etc (openSUSE-SU-2026:21704-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21704-1 advisory. This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the...

Alibaba Cloud Linux 3 : 0260: isns-utils (ALINUX3-SA-2026:0260)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0260 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55995: A Double Free vulnerability in...

TencentOS Server 4: libevent (TSSA-2026:0884)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0884 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

AlmaLinux 10 : dbus-broker (ALSA-2026:61340)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:61340 advisory. dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup CVE-2026-16730 Tenable has extracted the preceding description block directl...

RockyLinux 10 : dbus-broker (RLSA-2026:61340)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:61340 advisory. dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup CVE-2026-16730 Tenable has extracted the preceding description block direct...