GitLab 17.0 < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-104661)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticat...

Fortinet Fortigate GUI DoS (FG-IR-26-181)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-181 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130396 advisory. Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154,...

SUSE SLES15 Security Update : amazon-cloudwatch-agent (SUSE-SU-2026:4662-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4662-1 advisory. This update for amazon-cloudwatch-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow ...

Linux Distros Unpatched Vulnerability : CVE-2026-61711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could...

RockyLinux 8 : environment-modules (RLSA-2026:82919)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:82919 advisory. environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters CVE-2026-85013 Tenable h...

Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker Buildx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of ba...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130397 advisory. Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. Tenable has...

Unity Linux 20.1070e Security Update: libvirt (UTSA-2026-130363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130363 advisory. A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the...

MiracleLinux 9 : firefox-140.17.0-1.el9_8.ML.1 (AXSA:2026-2049:27)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2049:27 advisory. firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird:...

Unity Linux 20.1070e Security Update: expat (UTSA-2026-130352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130352 advisory. libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing ...

RHEL 9 : ghostscript (RHSA-2026:83553)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83553 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitma...

SUSE SLES15 Security Update : google-osconfig-agent (SUSE-SU-2026:4661-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4661-1 advisory. This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in...

Unity Linux 20.1070e Security Update: openvpn (UTSA-2026-130406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130406 advisory. A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memor...

SUSE SLES12 Security Update : containerd (SUSE-SU-2026:4671-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4671-1 advisory. - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation bsc1268430. Tenable has extracted the...

Unity Linux 20.1070e Security Update: libsoup (UTSA-2026-130370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130370 advisory. A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soupheadersparse can cause...

GitLab 17.4 < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-16275)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130385 advisory. Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to...

RHEL 10 : libsoup3 (RHSA-2026:83618)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83618 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup,...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130383)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130383 advisory. Privilege escalation in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154,...