GitLab 19.1 < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-96893)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticat...

AlmaLinux 9.6 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.6:CLSA-2026:1792085312)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792085312 advisory. - A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host...

RHEL 8 : ghostscript (RHSA-2026:83552)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83552 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitma...

MiracleLinux 9 : python-tornado-6.5.10-1.el9_8.1 (AXSA:2026-2053:04)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2053:04 advisory. tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient CVE-2026-103262 Tenable has extracted the preceding description block...

Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2026-130349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130349 advisory. An integer overflow in the libavfilter/vfscale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted...

GitLab 10.3 < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-100104)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an...

Linux Distros Unpatched Vulnerability : CVE-2026-98432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: free inetopt and ireqopt after an RCU grace period tcpv4synrecvsock transfers ownership of ireq-ireqopt to the child socket newinet-inetopt without copyin...

RHEL 10 : kernel (RHSA-2026:83207)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83207 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfnetlinkqueue: d...

RHEL 9 : ruby (RHSA-2026:83572)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83572 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management task...

Oracle Linux 9 : rpcbind (ELSA-2026-83562)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-83562 advisory. - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics tracking allows...

Unity Linux 20.1070e Security Update: open-iscsi (UTSA-2026-130354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130354 advisory. Unity Link Advisory UTSA-2026-130354 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:4674-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4674-1 advisory. This update for helm rebuilds it against the current go security release. Tenable has extracted the preceding description block directly fro...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130375 advisory. Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that wit...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130367 advisory. Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. Tenable has extracted the preceding...

Rocky Linux 9.6 [TuxCare] Security Update: mutt (ALMALINUX9.6:CLSA-2026:1792092200)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792092200 advisory. - heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

Rocky Linux 8 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_80817)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202680817 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-196...

RHEL 10 : ruby (RHSA-2026:83570)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83570 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management...

Amazon Linux 2 : awscli (ALASAWSCLI1-2026-001)

The version of awscli installed on the remote host is prior to 1.27.51-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2AWSCLI1-2026-001 advisory. Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask...

CVE-2026-81856

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix tasks. Hex prints strings supplied by the package repository and the documentati...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130372 advisory. Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox E...