RHEL 9 : acl (RHSA-2026:67142)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67142 advisory. Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfac...

RHEL 9 : python-lxml (RHSA-2026:67326)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67326 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 10 : nginx (RHSA-2026:67314)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67314 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...

Ubuntu 20.04 LTS / 22.04 LTS : FFmpeg vulnerabilities (USN-8750-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8750-1 advisory. Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated system were tricked into...

Linux Distros Unpatched Vulnerability : CVE-2026-89090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to...

Linux Distros Unpatched Vulnerability : CVE-2026-89459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c s390/percpu: Infrastructure for more efficient thiscpu operations introduced MVIYPERCPU, whi...

MiracleLinux 9 : 389-ds-base-2.8.0-10.el9_8 (AXSA:2026-1821:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1821:07 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...

Linux Distros Unpatched Vulnerability : CVE-2026-90994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with acces...

RHEL 8 : gstreamer1-plugins-bad-free (RHSA-2026:67151)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67151 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...

AlmaLinux 8 : gstreamer1-plugins-base (ALSA-2026:67145)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67145 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

RHEL 7 : sg3_utils (RHSA-2026:67157)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67157 advisory. The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes:...

RHEL 9 : grafana-pcp (RHSA-2026:67159)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67159 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

MiracleLinux 9 : perl-DBI-1.643-9.el9_8.5 (AXSA:2026-1822:04)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1822:04 advisory. DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-19546 Tenable has extracted the precedi...

RHEL 10 : kernel (RHSA-2026:67114)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67114 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: iouring/poll: fix signed...

Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2026-2147)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2147 advisory. GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions an...

Amazon Linux 2 : openssl11 (ALAS-2026-3907)

The version of openssl11 installed on the remote host is prior to 1.1.1zi-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3907 advisory. Issue summary: Receiving a DTLS record for a future epoch while a handshakeis in progress causes OpenSSL to buffer far...

Amazon Linux 2 : libtiff (ALAS-2026-3921)

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3921 advisory. An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the...

MiracleLinux 8 : qt5-qtbase-5.15.3-9.el8_10 (AXSA:2026-1824:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1824:01 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the...

Fedora 45 : perl-Data-Entropy (2026-f234be41fe)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f234be41fe advisory. Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue CVE-2026-18536. Tenable has extracted...

AlmaLinux 8 : perl-YAML-Syck (ALSA-2026:67269)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:67269 advisory. YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713 Tenable has extracted the preceding description block directly from the AlmaLinu...