Linux Distros Unpatched Vulnerability : CVE-2026-89161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. CVE-2026-89161...

AlmaLinux 9 : vim (ALSA-2026:66366)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66366 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service via...

RockyLinux 10 : vim (RLSA-2026:66336)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66336 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service v...

Xen: Improper Handling of HVM Emulation Return Codes (XSA-510)

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Linux Distros Unpatched Vulnerability : CVE-2026-88052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::loadviafgets in src/ccutil/unicharset.cpp trusts the declared unichar count as...

Linux Distros Unpatched Vulnerability : CVE-2026-45762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107307 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: check ipareaoffset and ipv6prefixescnt when receiving proposal msg When receiving propos...

Oracle Linux 10 : ELSA-2026-65895-0: / osbuild-composer (ELSA-2026-658950)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-658950 advisory. 176-1.0.2 - Rebuild for CVE-2026-33810, CVE-2026-33818, CVE-2026-39820, CVE-2026-42499,CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-5685...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107274)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107274 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9clientwrite and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107303 advisory. In the Linux kernel, the following vulnerability has been resolved: driver: iio: add missing checks on iioinfo's callback access Some callbacks from iioinfo structur...

RockyLinux 9 : python-lxml (RLSA-2026:66204)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66204 advisory. lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href CVE-2026-49825 Tenable has extracted the preceding description block...

Fedora 45 : mrtg (2026-c2dba9f29d)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c2dba9f29d advisory. Fix CVE-2026-72694: symlink-following privilege escalation in PID file handling Tenable has extracted the preceding description block directly from...

MiracleLinux 9 : python3.12-lxml-4.9.3-2.el9_8.1 (AXSA:2026-1813:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1813:01 advisory. lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href CVE-2026-49825 Tenable has extracted the preceding description block...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107320 advisory. In the Linux kernel, the following vulnerability has been resolved: hwpoison, memoryhotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 hwpoison,...

Linux Distros Unpatched Vulnerability : CVE-2026-88014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend...

Fedora 45 : cockpit (2026-a002299f28)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a002299f28 advisory. Automatic update for cockpit-367-1.fc45. Changelog for cockpit Thu Aug 27 2026 Packit - 367-1 - Translation updates Tenable has extracted the preceding...

Fedora 45 : freerdp2 (2026-20b7d49f70)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-20b7d49f70 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

RockyLinux 10 : tar (RLSA-2026:61586)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61586 advisory. tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path esca...

openSUSE 16: tomcat10 / tomcat10-admin-webapps / tomcat10-el-5_0-api / etc (openSUSE-SU-2026:21810-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21810-1 advisory. - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Doma...

AlmaLinux 10 : vim (ALSA-2026:66336)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66336 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service vi...