Oracle Linux 9 : ELSA-2026-66364-0: / git-lfs (ELSA-2026-663640)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-663640 advisory. 3.7.1-4.3 - Rebuild with updated golang - Resolves: RHEL-241575, RHEL-242274, RHEL-241799 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-89044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the...

Ubuntu 24.04 LTS : Netty vulnerability (USN-8742-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8742-1 advisory. It was discovered that Netty incorrectly validates the bailiwick of NS records. An attacker could possibly use this issue to facilitate DNS cache poisoning attack...

Fedora 43 : valkey (2026-cda5ad190f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cda5ad190f advisory. Valkey 8.1.10 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Securi...

AlmaLinux 8 : ansible-core (ALSA-2026:66248)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66248 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-80918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: core: fix number/pointer type confusion on long items When fetchitem is called by hidscanreport on an item with HIDITEMTAGLONG, it stores a pointer to the...

RHEL 9 : RHEL AI 3.6 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:66381)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66381 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

RHEL 9 : coreutils (RHSA-2026:66403)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66403 advisory. The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils...

Ubuntu 26.04 LTS : FFmpeg vulnerabilities (USN-8738-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8738-1 advisory. It was discovered that FFmpeg incorrectly handled certain video frames when using the hqdn3d filter. An attacker could possibly use this issue to cause a...

RHEL 8 : gstreamer1-plugins-bad-free (RHSA-2026:66406)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:66406 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...

JetBrains YouTrack < 2026.2.18769 Information Disclosure (CVE-2026-86496)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18769. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

RHEL 9 : apr-util (RHSA-2026:66341)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66341 advisory. The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains...

Linux Distros Unpatched Vulnerability : CVE-2026-88859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. Wh...

AlmaLinux 8 : osbuild-composer (ALSA-2026:66016)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66016 advisory. golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect...

Oracle Linux 8 : ELSA-2026-64791-0: / 389-ds:1.4 (ELSA-2026-647910)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647910 advisory. - Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results...

Palo Alto Networks PAN-OS 10.2.x / 11.0.x / 11.1.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.0.x, or 11.1.x. It is, therefore, affected by a vulnerability. A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due t...

Oracle Linux 8 : ELSA-2026-65998-0: / gzip (ELSA-2026-659980)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-659980 advisory. - There's an updated version of the CVE-2026-41992 fix Resolves: CVE-2026-41992 Tenable has extracted the preceding description block directly from t...

Oracle Linux 9 : ELSA-2026-66204-0: / python-lxml (ELSA-2026-662040)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-662040 advisory. - Security fix for CVE-2026-49825 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Fedora 44 : freerdp2 (2026-d91338eea8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d91338eea8 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Security Updates for Microsoft Publisher Products C2R (September 2026)

The Microsoft Publisher Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. CVE-2026-69742 - Deserialization of untrusted data ...