Linux Distros Unpatched Vulnerability : CVE-2026-75931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference...

EulerOS Virtualization 2.13.1 : ca-certificates (EulerOS-SA-2026-3168)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

RockyLinux 10 : python3.12 (RLSA-2026:58902)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58902 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding...

Dotnetnuke < 10.3.3 Server-Side request forgery in journal module (GHSA-hmwm-c2hx-wmxh)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - A server-side request forgery SSRF vulnerability in the Journal module could allow an authenticated user to cause the server to...

RHEL 10 : pam (RHSA-2026:59379)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59379 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

EulerOS Virtualization 2.13.1 : bind (EulerOS-SA-2026-3166)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

EulerOS Virtualization 2.13.1 : libXpm (EulerOS-SA-2026-3179)

According to the versions of the libXpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in X.org libXpm up to 3.5.4. It has been classified as problematic.CWE is classifying the issue as CWE-12...

RHEL 10 : nginx (RHSA-2026:59220)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59220 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

RHEL 8 : webkit2gtk3 (RHSA-2026:59325)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59325 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript...

Fedora 43 : kernel (2026-6d18f005f1)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d18f005f1 advisory. The 7.1.10 stable kernel update contains a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream...

Dotnetnuke < 10.3.3 Permission precedence flaw in module permissions (GHSA-hqgc-qj63-mx24)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - A permission evaluation flaw could allow users with page-level content permissions to access module management features despite...

EulerOS Virtualization 2.13.0 : httpd (EulerOS-SA-2026-3215)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...

Dotnetnuke < 10.3.3 GroupEdit postback tampering lets one group owner update another group (GHSA-4q79-2m2q-gw8w)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - An authorization vulnerability in the Social Groups module could allow a group owner to modify another group's information. Site...

Wazuh Server 4.3.0 < 4.14.6 Path Traversal (CVE-2026-49441)

The version of Wazuh Server on the remote host is at least 4.3.0 and prior to 4.14.6. It is, therefore, affected by a path traversal vulnerability: - The non-merged branch of processfilesfromworker trusts a peer-controlled filepath key from filesmetadata.json. A cluster peer holding the shared...

RHEL 8 : sg3_utils (RHSA-2026:59567)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59567 advisory. The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes:...

RockyLinux 9 : python3.12 (RLSA-2026:59009)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59009 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding descripti...

Linux Distros Unpatched Vulnerability : CVE-2026-76816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client...

EulerOS Virtualization 2.13.1 : python-paramiko (EulerOS-SA-2026-3191)

According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

Oracle Linux 9 : python3.14 (ELSA-2026-58901)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58901 advisory. - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 Tenable has extracted the preceding description block directly from the Oracle...

Linux Distros Unpatched Vulnerability : CVE-2026-52490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop....