Linux Distros Unpatched Vulnerability : CVE-2026-89459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c s390/percpu: Infrastructure for more efficient thiscpu operations introduced MVIYPERCPU, whi...

Linux Distros Unpatched Vulnerability : CVE-2026-52296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c. CVE-2026-52296 Note th...

MiracleLinux 9 : 389-ds-base-2.8.0-10.el9_8 (AXSA:2026-1821:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1821:07 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...

Linux Distros Unpatched Vulnerability : CVE-2026-90771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts proto as an error code...

Linux Distros Unpatched Vulnerability : CVE-2026-89090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to...

Oracle Linux 10 : ELSA-2026-66355-0: / kernel (ELSA-2026-663550)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-663550 advisory. 6.12.0-211.54.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux...

RHEL 9 : python-lxml (RHSA-2026:67326)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67326 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 9 : acl (RHSA-2026:67142)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67142 advisory. Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfac...

AlmaLinux 8 : gstreamer1-plugins-base (ALSA-2026:67145)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67145 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

AlmaLinux 8 : perl-YAML-Syck (ALSA-2026:67269)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:67269 advisory. YAML-Syck: YAML::Syck: Denial of Service via crafted YAML document CVE-2026-13713 Tenable has extracted the preceding description block directly from the AlmaLinu...

MiracleLinux 8 : qt5-qtbase-5.15.3-9.el8_10 (AXSA:2026-1824:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1824:01 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the...

Amazon Linux 2 : libtiff (ALAS-2026-3921)

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3921 advisory. An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the...

RHEL 10 : kernel (RHSA-2026:67114)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67114 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: iouring/poll: fix signed...

Fedora 45 : perl-Data-Entropy (2026-f234be41fe)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f234be41fe advisory. Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue CVE-2026-18536. Tenable has extracted...

AlmaLinux 10 : ruby4.0 (ALSA-2026:50773)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:50773 advisory. zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF...

Amazon Linux 2 : gstreamer-plugins-good (ALAS-2026-3913)

The version of gstreamer-plugins-good installed on the remote host is prior to 0.10.31-20. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3913 advisory. GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-19503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's...

Linux Distros Unpatched Vulnerability : CVE-2026-90578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gflistcount of the file utils/list.c of the component MP4Box. Executing a...

macOS 15.x < 15.8 Multiple Vulnerabilities (149043)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.8. It is, therefore, affected by multiple vulnerabilities: - A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES...

Linux Distros Unpatched Vulnerability : CVE-2026-85979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Affected versions of Puppet Enterprise contain a command injection vulnerability in the handling of the javakeystorepasswd parameter. An authenticated user with...