Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: flatpak (UTSA-2025-002801)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002801 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a...

Oracle Linux 9 : ELSA-2026-66179-0: / perl-DBI (ELSA-2026-661790)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-661790 advisory. 1.643-9.5 - Use Module::Load for safer package loading in DBI::Profile CVE-2026-19546 Related: RHEL-236831 Tenable has extracted the preceding description blo...

RHEL 9 : vim (RHSA-2026:66366)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66366 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Information disclosure and denial of service...

Oracle Linux 8 : ELSA-2026-64823-0: / redis:6 (ELSA-2026-648230)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648230 advisory. 6.2.24-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373 Tenable has...

AlmaLinux 10 : opentelemetry-collector (ALSA-2026:65116)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:65116 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via...

MiracleLinux 8 : expat-2.5.0-2.el8_10.2 (AXSA:2026-1805:10)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1805:10 advisory. expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution v...

JetBrains TeamCity 2018.2 - 2019.2.1 Information Disclosure (CVE-2020-11938)

The version of JetBrains TeamCity installed on the remote host is version 2018.2 up to and including 2019.2.1. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. T...

MikroTik RouterOS 7.20 < 7.23.4 / 7.24.x < 7.24.2 WebFig Unauthenticated File Read (CVE-2026-67281)

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 7.20 prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by an information disclosure vulnerability. RouterOS WebFig contains an unauthenticated file-read vulnerabilit...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : MiniUPnPd vulnerability (USN-8731-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8731-1 advisory. It was discovered that MiniUPnPd contained an integer underflow vulnerability in SOAPAction header parsing. A remo...

Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS : libssh2 vulnerabilities (USN-8722-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8722-1 advisory. It was discovered that libssh2 incorrectly handled certain SFTP server responses. A remote attacker controlling an S...

Microsoft Dynamics 365 (on-premises) (September 2026)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. CVE-2026-65772 Note that Nessus has not tested fo...

Fedora 43 : openssl (2026-00b3d3d018)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-00b3d3d018 advisory. Rebase to OpenSSL 3.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Linux Distros Unpatched Vulnerability : CVE-2026-87933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation...

Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-039482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-039482 advisory. A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution...

Linux Distros Unpatched Vulnerability : CVE-2026-88050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts...

RHCOS 4 : OpenShift Container Platform 4.16.70 (RHSA-2026:62548)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:62548 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...

RockyLinux 10 : perl-DBI (RLSA-2026:65887)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:65887 advisory. DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-19546 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-84828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PCS Pacemaker Configuration System. A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command...

Unity Linux 20.1070a Security Update: gzip (UTSA-2026-107042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107042 advisory. GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompressi...

AlmaLinux 10 : valkey (ALSA-2026:64796)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64796 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 valkey: Valkey: Remote code execution via use-after-free in...