Linux Distros Unpatched Vulnerability : CVE-2026-80220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - prometheus-postgres-exporter - None Ubuntu Linux - Unknown description CVE-2026-80220 Note that Nessus relies on the presence of the package as...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105431 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity check on the...

AlmaLinux 9 : xmlrpc-c (ALSA-2026:61316)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:61316 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...

F5 Networks BIG-IP : BIG-IP and BIG-IQ Configuration utility vulnerability (K000162521)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.0.0.3 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000162521 advisory. BIG-IP has a vulnerability where an authenticated user of any role may be able to create...

RHEL 7 : freerdp (RHSA-2026:62401)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62401 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Linux Distros Unpatched Vulnerability : CVE-2026-84135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155. CVE-2026-84135 Note that Nessus relies on the presence of the package as...

ServiceNow Platform Unauthenticated Blind SQL Injection (CVE-2024-8924)

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Xanadu, Washington DC, and earlier Now Platform releases. This vulnerability could potentially enable an unauthenticated user to acquire unauthorized data stored within the Now Platform. Note that Nessus has n...

RHEL 9 : kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 (RHSA-2026:62638)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62638 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

Linux Distros Unpatched Vulnerability : CVE-2026-84304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvM...

Oracle Linux 9 : ELSA-2026-61240-0: / pipewire (ELSA-2026-612400)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-612400 advisory. - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 Tenable has extracted the preceding description block directly...

Linux Distros Unpatched Vulnerability : CVE-2026-83616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...

Oracle Linux 9 : ELSA-2026-62143-0: / wget (ELSA-2026-621430)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621430 advisory. - Fix CVE-2026-58471: buffer overflow in convertfname Tenable has extracted the preceding description block directly from the Oracle Linux security...

RockyLinux 9 : wget (RLSA-2026:62143)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62143 advisory. wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or...

The vulnerability of the setUploadUserData() function in TOTOLINK A7000R router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the setUploadUserData function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A7000R router’s microprogramming system exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

RockyLinux 10 : nodejs24 (RLSA-2026:61377)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61377 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000161728)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000161728 advisory. A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker ...

Oracle Linux 9 : ELSA-2026-60304-0: / golang (ELSA-2026-603040)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-603040 advisory. 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 - Resolves: RHEL-246425 1.26.5-2 - Update t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105459 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2xattrfindentry xattr in ocfs2 maybe 'non-indexed'...

Linux Distros Unpatched Vulnerability : CVE-2026-84637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executabl...

Linux Distros Unpatched Vulnerability : CVE-2026-78410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local...