Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-3374)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3374 advisory. Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. CVE-2026-114148 Out-of-bounds write in .NET allows an unauthorized attacker to execut...

Linux Distros Unpatched Vulnerability : CVE-2026-108348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108348 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Amazon Linux 2 : oci-add-hooks (ALASDOCKER-2026-160)

The version of oci-add-hooks installed on the remote host is prior to 0-0.13.20200504git325a340. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-160 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

Linux Distros Unpatched Vulnerability : CVE-2026-108343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108343 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Amazon Linux 2 : soci-snapshotter (ALASDOCKER-2026-157)

The version of soci-snapshotter installed on the remote host is prior to 0.16.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-157 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificat...

Linux Distros Unpatched Vulnerability : CVE-2026-105454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RT's automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted to break out of the link's addres...

Linux Distros Unpatched Vulnerability : CVE-2026-108352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108352 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-3339)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3339 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Oracle Linux 8 : aspell (ELSA-2026-92615)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92615 advisory. 12:0.60.6.1-23 - Backport fix for CVE-2026-103658 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

SUSE SLES16 Security Update : kernel (Live Patch 8 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24456-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24456-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues...

SUSE SLES16 Security Update : kernel (Live Patch 6 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24451-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24451-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues...

Linux Distros Unpatched Vulnerability : CVE-2026-118593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2026:92158)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92158 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

Amazon Linux 2 : nerdctl (ALAS-2026-4053)

The version of nerdctl installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4053 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's...

Medium: containerd

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

CentOS Linux 8 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS-STREAM8:CLSA-2026:1793354551)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1793354551 advisory. - Python has added a denylist for known compromised certificates to the ssl module to ensure user safety even without certificate...

Rocky Linux 8.6 [CIQ] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs (ciqsa-2026_1732)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261732 advisory. This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2026-81642. Tenable has extracted the preceding description...

SUSE SLES16 Security Update : kernel (Live Patch 5 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24457-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24457-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues...

Medium: oci-add-hooks

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Rocky Linux 10.2 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource (crlsa-2026_90895)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202690895 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 Bug Fixes and Enhancements: Thunderbird ESR 153 rebase rhel-10.2.z JIRA:Rocky Linux-175207...