TencentOS Server 4: nodejs20 (TSSA-2026:0949)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0949 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

openSUSE 16 Security Update : librest (openSUSE-SU-2026:21694-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21694-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseud...

Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-2122)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2122 advisory. Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...

RHEL 9 : postgresql (RHSA-2026:62116)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62116 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Denial of Service via...

PostgreSQL 17.x < 17.11 / 18.x < 18.6 GSSAPI Improper Message Integrity Enforcement

The version of PostgreSQL installed on the remote host is 17 prior to 17.11 or 18 prior to 18.6. As such, it is potentially affected by a security bypass vulnerability: - Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.con...

RHEL 10 : rest (RHSA-2026:62222)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62222 advisory. The rest packages provide a library for access to the RESTful web services. Security Fixes: librest: weak random number generation in PKCE...

Alibaba Cloud Linux 3 : 0262: abrt (ALINUX3-SA-2026:0262)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0262 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54228: A time-of-check time-of-us...

Mozilla Thunderbird < 153.2

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-88 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in...

openSUSE 16: gstreamer-devtools / gstreamer-devtools-devel / etc (openSUSE-SU-2026:21689-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21689-1 advisory. - CVE-2025-4574: crossbeam-channel: internal Channel type's Drop method has a race condition that can lead to a double-free and memory corruptio...

AlmaLinux 9 : nginx:1.26 (ALSA-2026:59496)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59496 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service ...

Mozilla Firefox ESR < 153.2

The version of Firefox ESR installed on the remote Windows host is prior to 153.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-85 advisory. - Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 155...

Alibaba Cloud Linux 3 : 0272: unbound (ALINUX3-SA-2026:0272)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0272 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-44690: In NLnet Labs Unbound 1.7.0 up to a...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:61943)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61943 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...

Alibaba Cloud Linux 3 : 0258: libarchive (ALINUX3-SA-2026:0258)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0258 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-14164: A double free issue has been...

TencentOS Server 4: vim (TSSA-2026:0871)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0871 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

MiracleLinux 8 : abrt-2.10.9-26.el8_10.ML.1 (AXSA:2026-1725:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1725:01 advisory. abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories CVE-2026-54228 abrt: ChownProblemDir succeeds...

MiracleLinux 8 : iperf3-3.5-12.el8_10.1 (AXSA:2026-1717:05)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1717:05 advisory. iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVE-2026-71217 Tenable has...

Fedora 46 : freerdp2 (2026-1c0deda1e7)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1c0deda1e7 advisory. Automatic update for freerdp2-2.11.7-16.fc46. Changelog Mon Aug 31 2026 Ondrej Holy - 2.11.7-16 - Backport several CVE fixes CVE-2026-22852,...

Oracle Linux 8 : ELSA-2026-61242-0: / mingw-sqlite (ELSA-2026-612420)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612420 advisory. 3.26.0.0-3 - Fix CVE-2026-11822 CVE-2026-11824 Resolves: RHEL-218233 Tenable has extracted the preceding description block directly from the Oracle Linux...

Linux Distros Unpatched Vulnerability : CVE-2026-80213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its...