openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21816-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21816-1 advisory. Changes in hauler: Update to 2.1.0 bsc1265425, CVE-2026-41888, bsc1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662, . Tenable has extracted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107308)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107308 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: properly dereference pe in ipvsaddservice Use pe directly to resolve sparse warning:...

RockyLinux 9 : kernel (RLSA-2026:66180)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66180 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: ipv6: prevent possible UaF in addrconfpermanentaddr CVE-2026-4333...

FreeBSD : immich -- open redirect and reflected XSS in maintenance endpoint (fcc6baaa-adbc-11f1-a655-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fcc6baaa-adbc-11f1-a655-3497f65b111b advisory. The immich project reports: The /maintenance endpoint fails to validate the continue URL parameter. Whe...

Ubiquiti UniFi OS Server < 5.1.37 Multiple Vulnerabilities

The version of Ubiquiti UniFi OS Server installed on the remote host is prior to 5.1.37. It is, therefore, affected by multiple vulnerabilities: - A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability fou...

Fedora 45 : tkimg (2026-a23a377e11)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a23a377e11 advisory. Update to 2.1.1, update bundled libtiff to 4.7.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Xen: Stale TLB Entry Ahead of Page Scrubbing (XSA-511)

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

RockyLinux 9 : coreutils (RLSA-2026:66403)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66403 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directly fr...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107321 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxecompqueuepkt In rxecompqueuepkt an incoming response packet skb is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107279 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipectx has a size of MAXPIPES so checki...

AlmaLinux 9 : git-lfs (ALSA-2026:66364)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:66364 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-88056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

Linux Distros Unpatched Vulnerability : CVE-2026-79514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the gfdmdatareceived function downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTT...

Linux Distros Unpatched Vulnerability : CVE-2026-71616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gfroutemediacompleteobject. Fixed in...

Linux Distros Unpatched Vulnerability : CVE-2026-88033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file...

Fedora 45 : gegl04 (2026-03ea7c5707)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-03ea7c5707 advisory. This update fixes an overflow in parsing RGBE/HDR image files. Tenable has extracted the preceding description block directly from the Fedora security...

ConnectWise ScreenConnect < 26.6.5 Missing Authorization

According to its version, the ConnectWise ScreenConnect remote access software installed on the remote host is prior to 26.6.5. It is, therefore, affected by a missing authorization vulnerability: - A condition in the ScreenConnect client may allow files to be transferred and executed through an...

Adobe Commerce/Magento Open Source Arbitrary Code Execution (APSB26-146)

The version of Adobe Commerce/Magento Open Source installed on the remote host is affected by a vulnerability as referenced in the APSB26-146 advisory. - Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107264 advisory. In the Linux kernel, the following vulnerability has been resolved: md: Don't register syncthread for reshape directly Currently, if reshape is interrupted, then...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107324 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring: lock overflowing for IOPOLL syzbot reports an issue with overflow filling for IOPOLL:...