Fedora 45 : openvpn (2026-17203fb331)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-17203fb331 advisory. Update to upstream 2.7.7 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-46387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,...

AlmaLinux 9 : coreutils (ALSA-2026:66403)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66403 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directly fro...

Fedora 45 : libevent (2026-0a83f1b852)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0a83f1b852 advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

AlmaLinux 10 : kernel (ALSA-2026:65334)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:65334 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: Bluetooth: SMP: force responder MITM requirements before building...

AlmaLinux 9 : vim (ALSA-2026:66366)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66366 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Service via...

Apache Artemis 1.0.0 < 2.45.0 / 2.50.0 < 2.57.0 Multiple Vulnerabilities

The version of Apache Artemis formerly Apache ActiveMQ Artemis installed on the remote host is affected by multiple vulnerabilities: - An unauthenticated remote attacker can craft a CORE protocol SESSIONREATTACH packet to steal an existing session and assume ongoing execution of the previously...

Linux Distros Unpatched Vulnerability : CVE-2026-86776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a...

Linux Distros Unpatched Vulnerability : CVE-2026-89158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of- bounds write. CVE-2026-89158 Note that Nessus relies on the...

Fedora 45 : freerdp2 (2026-20b7d49f70)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-20b7d49f70 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Fedora 45 : kernel / kernel-headers (2026-a0019f8ab9)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a0019f8ab9 advisory. The 7.2.4 stable kernel update contains a number of important fixes across the tree. ---- The 7.2.3 stable kernel update contains a number of important fixes...

HP Support Assistant < 9.53.2.0 Potential Escalation of Privilege (HPSBGN04131)

The version of HP Support Assistant installed on the remote Windows host is prior to 9.53.2.0. It is, therefore, affected by a privilege escalation vulnerability as referenced in the HPSBGN04131 advisory: - A potential security vulnerability has been identified in the HP Support Assistant for...

Fedora 45 : composer (2026-249d41312c)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-249d41312c advisory. Version 2.10.3 - 2026-08-27 Security: Validate package bin paths against path traversal using symlinks GHSA-96h3-5x6v-m776, CVE-2026-59944 Security:...

Fedora 43 : libevent (2026-728dd9f704)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-728dd9f704 advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : KissFFT vulnerabilities (USN-8745-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8745-1 advisory. It was discovered that KissFFT incorrectly handled certain large Fourier transform sizes on 32-bit architectures. An attacker cou...

Xen: Improper Handling of HVM Emulation Return Codes (XSA-510)

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107306 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: config: fix iteration issue in 'usbgetbosdescriptor' The BOS descriptor defines a root...

RockyLinux 10 : osbuild-composer (RLSA-2026:66432)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66432 advisory. golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821...

AlmaLinux 10 : gstreamer1-plugins-base (ALSA-2026:66460)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66460 advisory. gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gstrtspmessageparseauthcredentials when parsing a crafted Digest...

RHEL 10 : osbuild-composer (RHSA-2026:66432)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66432 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...