Citrix Workspace App for Windows Out-of-bounds Write (CVE-2026-84419) (CTX697181)

The version of Citrix Workspace App for Windows installed on the remote host is 2507.1 LTSR prior to 2507.1 LTSR CU3 Hotfix 1, or Current Release prior to 2603.20, or 2607 LTSR prior to 2607 LTSR Hotfix 1. It is, therefore, affected by an out-of-bounds write vulnerability as referenced in the...

AlmaLinux 9 : fetchmail (ALSA-2026:86981)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:86981 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description block...

Rocky Linux 9.6 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc (ALMALINUX9.6:CLSA-2026:1792623317)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792623317 advisory. - A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occu...

Linux Distros Unpatched Vulnerability : CVE-2026-111816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out...

SUSE SLES12 Security Update : ca-certificates-mozilla (SUSE-SU-2026:4821-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4821-1 advisory. Updated to 2.92 state bsc1286261 Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1 Updated to 2.90 state...

Rocky Linux 10.2 [CIQ] Security Update: librsvg2 / librsvg2-debuginfo / librsvg2-debugsource / etc (crlsa-2026_86841)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202686841 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block direct...

SUSE SLED15 / SLES15 Security Update : python-oauthlib (SUSE-SU-2026:4807-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4807-1 advisory. This update for python-oauthlib fixes the following issue: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection...

SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:4822-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4822-1 advisory. This update for docker rebuilds it against the current go security release. Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-111811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the shared proxy cache. This issue affects...

Linux Distros Unpatched Vulnerability : CVE-2026-111810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a request carrying many suc...

Rocky Linux 10.2 [CIQ] Security Update: hostapd / hostapd-debuginfo / hostapd-debugsource (crlsa-2026_85276)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685276 advisory. hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request CVE-2026-58374 Tenable has extracted the preceding descriptio...

Citrix XenServer 8.4.x Page Reference Leak (CTX697170)

The version of Citrix XenServer installed on the remote host is 8.4.x. It is, therefore, affected by a vulnerability as referenced in the CTX697170 advisory: - The grant table cache-flush error path fails to drop a page reference, which may allow a privileged user in a guest VM to compromise or...

Dell Alienware Command Center < 6.14.54.0 Least Privilege Violation (DSA-2026-418)

The version of Dell Alienware Command Center AWCC installed on the remote host is prior to 6.14.54.0. It is, therefore, affected by a least privilege violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileg...

openSUSE 16 Security Update : coredns (openSUSE-SU-2026:22135-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22135-1 advisory. Changes in coredns: - Bump vendored google.golang.org/grpc from 1.83.0 to 1.83.1: CVE-2026-84304: heap memory exhaustion via HTTP/2 DATA frame...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : c-ares vulnerabilities (USN-8951-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8951-1 advisory. It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could...

Linux Distros Unpatched Vulnerability : CVE-2026-111809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer- Encoding. This issue affects Apache Traffic Server: from...

Fedora 43 : linux-firmware (2026-bd021461a8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bd021461a8 advisory. Update to 20261019: rockchip: add PCIe3 PHY firmware for snps-pcie3 Update ADSP firmware for Qualcomm qcs615 platform. Revert amdgpu: update GC 11.0.0 firmwa...

IBM MQ 9.4.5.0 - 9.4.5.1 CD < 10.0.0.0 (7290859)

The version of IBM MQ installed on the remote host is 9.4.5.0 through 9.4.5.1 CD. It is, therefore, affected by a vulnerability as referenced in the 7290859 advisory. - IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted...

Fedora 43 : gnome-shell-extension-gsconnect (2026-eb93fa8f63)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eb93fa8f63 advisory. Voici les notes de la release, telles que publies par daniellandau le 2026-09-23 : --- Release GSConnect v73 What's Changed Security: fix authenticated path...

PT-2026-120890

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268 B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has...