Amazon Linux 2023 : golist (ALAS2023-2026-3361)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3361 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2026-3354)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3354 advisory. In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation. CVE-2026-106552 In sshd in OpenS...

Linux Distros Unpatched Vulnerability : CVE-2026-108344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108344 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Amazon Linux 2023 : cni-plugins (ALAS2023-2026-3349)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3349 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Linux Distros Unpatched Vulnerability : CVE-2026-108347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108347 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

SUSE SLES11: kernel-default / kernel-default-base / kernel-ec2 / kernel-ec2-base / etc (SUSE-SU-2026:4933-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4933-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-74587:...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2026:92160)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92160 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

Amazon Linux 2023 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2023-2026-3372)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3372 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...

Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2026_90462)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202690462 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Medium: containerd

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: ecs-init

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Oracle Linux 9 : .NET / 9.0 (ELSA-2026-92429)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92429 advisory. 9.0.123-1.0.1 - Add support for Oracle Linux 9.0.123-1 - Update to .NET SDK 9.0.123 and Runtime 9.0.22 - Resolves: RHEL-291727 Tenable has extracted the...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1793359087)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793359087 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: remove blockcb from driverlist before freei...

Linux Distros Unpatched Vulnerability : CVE-2026-108273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108273 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2026-135)

The version of kernel installed on the remote host is prior to 5.4.302-229.503. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2026-135 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU gra...

Linux Kernel TCP SYN DoS

The vulnerability in the tcpv4synrecvsock function of the IPv4 protocol implementation within the Linux kernel is related to memory usage after it has been freed. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Oracle Linux 9 : curl (ELSA-2026-92907)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92907 advisory. 7.76.1-40.el98.9 - fix incomplete mTLS config in connection reuse CVE-2026-8932 Tenable has extracted the preceding description block directly from the Oracle...

Amazon Linux 2 : containerd (ALASECS-2026-152)

The version of containerd installed on the remote host is prior to 2.3.7-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-152 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the...

Amazon Linux 2023 : golang-github-burntsushi-toml-test, golang-github-burntsushi-toml-test-devel (ALAS2023-2026-3363)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3363 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Rocky Linux 10.2 [CIQ] Security Update: brotli / brotli-debuginfo / brotli-debugsource / brotli-devel / etc (crlsa-2026_90449)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202690449 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the CIQ security...