RHEL 8 : libkcapi (RHSA-2026:67266)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67266 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...

Linux Distros Unpatched Vulnerability : CVE-2026-90771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts proto as an error code...

Amazon Linux 2 : gegl (ALAS-2026-3911)

The version of gegl installed on the remote host is prior to 0.2.0-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3911 advisory. GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

Amazon Linux 2 : gimp (ALASGIMP-2026-020)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-020 advisory. GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...

Oracle Linux 10 : ELSA-2026-66355-0: / kernel (ELSA-2026-663550)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-663550 advisory. 6.12.0-211.54.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux...

RHEL 9 : podman (RHSA-2026:67450)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67450 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

Amazon Linux 2023 : perl-YAML, perl-YAML-tests (ALAS2023-2026-2151)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2151 advisory. Backtracking leads to exponential load time in libyaml library. CVE-2026-63676 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-89632

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix use-before-check of ReparseDataLength in reparsebufptr reparsebufptr reads buf-ReparseDataLength before checking that count covers the full...

Amazon Linux 2023 : nodejs24, nodejs24-devel, nodejs24-full-i18n (ALAS2023-2026-2141)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2141 advisory. Versions of the package pacote from 11.2.7 are vulnerable to Denial of Service DoS via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec...

Linux Distros Unpatched Vulnerability : CVE-2026-86320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use- git-am: true. An attacker who can provide a malicious...

Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2026-2159)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2159 advisory. A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop inflate processes data in chunks without enforcing an upper bounda...

RHEL 8 : perl (RHSA-2026:67162)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67162 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl:...

RHEL 9 : kernel (RHSA-2026:67150)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67150 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Servi...

Amazon Linux 2 : cups-filters (ALAS-2026-3901)

The version of cups-filters installed on the remote host is prior to 1.0.35-26. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3901 advisory. A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installi...

Amazon Linux 2 : libvirt (ALAS-2026-3910)

The version of libvirt installed on the remote host is prior to 4.5.0-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3910 advisory. A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RP...

RHEL 9 : grafana-pcp (RHSA-2026:67132)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67132 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

Linux Distros Unpatched Vulnerability : CVE-2026-72709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under ecrire/action/ that allows unauthenticated attackers to...

Ubuntu 20.04 LTS / 22.04 LTS : FFmpeg vulnerabilities (USN-8750-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8750-1 advisory. Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated system were tricked into...

Fedora 45 : podman-tui (2026-14e836e595)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-14e836e595 advisory. release v2.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Oracle Linux 10 : ELSA-2026-67129-0: / firefox (ELSA-2026-671290)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-671290 advisory. 140.15.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...