openSUSE 16 Security Update : apache2-mod_auth_openidc (openSUSE-SU-2026:21717-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21717-1 advisory. This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the...

Linux Distros Unpatched Vulnerability : CVE-2026-19475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause,...

PT-2026-85260

A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon center.cgi of the component Add-On Center. Such manipulation of the argument f name/f url/f flag/f login user leads to os command injection. It is...

Oracle Linux 9 : image-builder (ELSA-2026-23228)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-23228 advisory. 72.0.0-1.0.1 - Adopt upstream image-builder 72.0.0 tarball and spec file Orabug: 39666668 - Adopt Oracle Linux Support merged upstream in PR 2404...

FreeBSD : electron42 -- multiple vulnerabilities (271556c1-ddbf-4d44-95e6-a731841539b2)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 271556c1-ddbf-4d44-95e6-a731841539b2 advisory. Electron developers report: This update fixes the following vulnerabilities: CVE-2026-15764,...

Oracle Linux 10 : ELSA-2026-61680-0: / iperf3 (ELSA-2026-616800)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-616800 advisory. - Fix JSON value bounds checks in getparameters and iperfparsearguments CVE-2026-71217 Tenable has extracted the preceding description block directly from th...

RockyLinux 10 : nodejs22 (RLSA-2026:61376)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61376 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105460 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rtbindexception from rebinding stale fnhe The sit driver's packet transmissi...

TencentOS Server 3: gimp:2.8 (TSSA-2026:0972)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0972 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Oracle Linux 9 : ELSA-2026-61903-0: / php:8.2 (ELSA-2026-619030)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-619030 advisory. php 8.2.33-1 - rebase to 8.2.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040...

Linux Distros Unpatched Vulnerability : CVE-2026-70409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by...

Linux Distros Unpatched Vulnerability : CVE-2026-84640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.1...

Linux Distros Unpatched Vulnerability : CVE-2026-84333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a craft...

AlmaLinux 8 : freerdp (ALSA-2026:62571)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62571 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-80230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - curl - None Ubuntu Linux - Unknown description CVE-2026-80230 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-84355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web...

Fedora 43 : mingw-expat (2026-43f21f29dc)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-43f21f29dc advisory. Update to expat-2.8.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Linux Distros Unpatched Vulnerability : CVE-2026-73812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 6.3 identifies as a...

Microsoft Edge (Chromium) < 152.0.4191.62 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.62. It is, therefore, affected by multiple vulnerabilities as referenced in the September 3, 2026 advisory. - Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote...

Roundcube Webmail 1.6.x < 1.6.18 / 1.7.x < 1.7.3 Multiple Vulnerabilities

The remote web server is running Roundcube Webmail version 1.6.x prior to 1.6.18 or 1.7.x prior to 1.7.3. It is, therefore, affected by multiple vulnerabilities: - The cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This iss...