Fedora 43 : gdk-pixbuf2 (2026-cf5d926f46)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cf5d926f46 advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 ---- Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768 Tenable...

Oracle Linux 10 : ELSA-2026-64775-0: / kernel (ELSA-2026-647750)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647750 advisory. - dm-verity: fix buffer overflow in FEC calculation Benjamin Marzinski RHEL-244969 CVE-2026-72098 - nvmet-rdma: handle inline data with a nonzero...

AlmaLinux 9 : apr-util (ALSA-2026:66341)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66341 advisory. apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client CVE-2026-34501 apr-util: Apache Portable Runtime Utility: Information...

RHEL 8 : gstreamer1-plugins-bad-free (RHSA-2026:66406)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:66406 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...

JetBrains TeamCity < 2025.11.6 / 2026.1.x < 2026.1.2 Code Execution (CVE-2026-65906)

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.6, or version 2026.1 up to but not including 2026.1.2. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution via Kotlin DSL sandbox escape was possible...

Oracle Linux 10 : ELSA-2026-66336-0: / vim (ELSA-2026-663360)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-663360 advisory. - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes -...

RHEL 8 : freerdp (RHSA-2026:66282)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66282 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Unity Linux 20.1060e Security Update: containerd (UTSA-2026-107041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107041 advisory. containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be...

MiracleLinux 9 : pam-1.5.1-28.el9_8.1 (AXSA:2026-1797:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1797:03 advisory. linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 Tenable has extracted the preceding description block direct...

RockyLinux 8 : osbuild-composer (RLSA-2026:66016)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66016 advisory. golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect...

RHEL 9 : Red Hat OpenStack Platform 17.1 security advisory (Important) (RHSA-2026:66401)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66401 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

Linux Distros Unpatched Vulnerability : CVE-2026-87822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values tha...

Fedora 43 : libsoup3 (2026-fce2f41203)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fce2f41203 advisory. Fixes lots of CVEs: see the fixes section for details Tenable has extracted the preceding description block directly from the Fedora security...

Linux Distros Unpatched Vulnerability : CVE-2026-61908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of- bounds index. An authenticated user could attempt to...

JetBrains YouTrack < 2026.1.14047 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.1.14047. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin...

Linux Distros Unpatched Vulnerability : CVE-2026-88015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : SSSD vulnerability (USN-8718-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8718-1 advisory. It was discovered that SSSD did not properly validat...

Fedora 44 : perl-Net-DNS (2026-a0607111e6)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a0607111e6 advisory. Update to Net-DNS 1.56 from 1.53. Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR rt.cpan 179945 - Denial of Service via...

Oracle Linux 9 : ELSA-2026-66364-0: / git-lfs (ELSA-2026-663640)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-663640 advisory. 3.7.1-4.3 - Rebuild with updated golang - Resolves: RHEL-241575, RHEL-242274, RHEL-241799 Tenable has extracted the preceding description block...

Ubuntu 24.04 LTS : Netty vulnerability (USN-8742-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8742-1 advisory. It was discovered that Netty incorrectly validates the bailiwick of NS records. An attacker could possibly use this issue to facilitate DNS cache poisoning attack...