Fedora 45 : nicotine+ (2026-4b6e8bed0f)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4b6e8bed0f advisory. Version 3.3.11 September 16, 2026 Changes Added menu items for moving column headers due to broken drag-and-drop in GTK Enabled fixed number of upload slots ...

Fedora 43 : rust-cargo-rpmstatus (2026-dcc4b9337f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dcc4b9337f advisory. Rebuilt with updated rustls and webpki dependencies - Fixes RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0381,...

Linux Distros Unpatched Vulnerability : CVE-2026-112816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticat...

openSUSE 16 Security Update : python-Brotli (openSUSE-SU-2026:22183-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22183-1 advisory. - CVE-2025-6176: denial of service DoS due to a flaw in its brotli decompression bsc1252945. - CVE-2026-111497: Brotli decoder out-of-bounds wri...

Fedora 43 : ruby (2026-8e3e7af1cb)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8e3e7af1cb advisory. New version 3.4.12 is released. This new rpm contains several bug fixes in Onigumo regular expression compilation. Tenable has extracted the preceding...

FreeBSD : amule -- multiple vulnerabilities (ac97113e-d514-11f1-b2f0-002b67dfc673)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ac97113e-d514-11f1-b2f0-002b67dfc673 advisory. aMule developers report: A security release first: it fixes 15 vulnerabilities reported through GitHub...

CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793163099)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793163099 advisory. - BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses...

Linux Distros Unpatched Vulnerability : CVE-2026-116566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated. CVE-2026-116566 Note that...

Improper Apache Wicket output handling vulnerability

Vulnerabilities related to improper output handling exist in Apache Wicket versions 8.0.0 through 8.19.0, 9.0.0 through 9.24.0, and 10.0.0 through 10.11.0. These stem from improper output encoding or escaping; specifically, the JavaScriptUtilsescapeQuotes method fails to escape backslashes,...

openSUSE 16: gvfs / gvfs-backend-afc / gvfs-backend-goa / gvfs-backend-gphoto / etc (openSUSE-SU-2026:22174-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22174-1 advisory. This update for gvfs fixes the following issue: - CVE-2026-88924: gvfs-admin socket ownership race condition allows local users to change the ownership ...

RockyLinux 8 : python-pillow (RLSA-2026:93077)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:93077 advisory. pillow: Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO CVE-2026-112393 pillow: Pillow: Heap buffer overflow in FlashPix FPX...

Linux Distros Unpatched Vulnerability : CVE-2026-119371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITELIMITEXPRDEPTH nesting limit because common table...

Linux Distros Unpatched Vulnerability : CVE-2026-119562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying unescaped colextra and colattribute...

openSUSE 16: epiphany / epiphany-branding-upstream / epiphany-lang / etc (openSUSE-SU-2026:22199-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22199-1 advisory. Changes in epiphany: - CVE-2026-77679: path traversal in WebExtension XPI extraction ZIP slip bsc1276758 - CVE-2026-77682: JavaScript code...

Linux Distros Unpatched Vulnerability : CVE-2026-120245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrastdecodeframe that leaks heap memory when decoding truncated 1-bit and...

Rocky Linux 8 [CIQ] Security Update: hplip / hplip-common / hplip-debuginfo / hplip-debugsource / etc Multiple Vulnerabilities (crlsa-2026_82295)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202682295 advisory. hplip: potential memory buffer overflow CVE-2020-6923 hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple...

openSUSE 16: stgit / stgit-bash-completion / stgit-emacs / stgit-fish-completion / etc (openSUSE-SU-2026:22204-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22204-1 advisory. Changes in stgit: - Update to version 2.7.0: Allow unambiguous command shorthands, opt-in with stgit.infer-commands. Accept git approxidate...

FreeBSD : uriparser -- Denial of Service through Unbound Recursion (65abbad5-da78-11f0-b6d5-843a4b343614)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 65abbad5-da78-11f0-b6d5-843a4b343614 advisory. The URIparser project reports: uriparser through 0.9.9 allows unbounded recursion and stack consumption...

CentOS Linux 7 [TuxCare] Security Update: sudo / sudo-devel (CENTOS7:CLSA-2026:1793183073)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793183073 advisory. - A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z...

Linux Distros Unpatched Vulnerability : CVE-2026-104843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way tha...