MiracleLinux 9 : nginx-1.20.1-28.el9_8.2.ML.1 (AXSA:2026-1233:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1233:04 advisory. nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 Tenable has extracted the preceding description block directly from the MiracleLinux...

Oracle Linux 8 : libtasn1 (ELSA-2026-36728)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36728 advisory. 4.13-6 - Backport the fix for CVE-2025-13151 RHEL-139546 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

RockyLinux 8 : libxml2 (RLSA-2026:36734)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:36734 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly from th...

RockyLinux 10 : perl-HTTP-Daemon (RLSA-2026:36189)

The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:36189 advisory. perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in sendfile CVE-2026-8450 Tenable has extracted the preceding description bloc...

Fedora 44 : helm (2026-5b642da12e)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5b642da12e advisory. Update to 4.2.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Important: gstreamer-plugins-good

Issue Overview: A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation 4 blocksamples channels in gstwavpackdechandleframe causes a very small heap allocation. The WavPack...

Foxit PDF Reader < 2026.1.2 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit Reader installed on the remote Windows host is prior to 2026.1.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application'...

mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files

In mcp-server-git versions prior to 2025.12.18, the gitdiff and gitcheckout functions passed user-controlled arguments directly to git CLI commands without sanitization. Flag-like values e.g., --output=/path/to/file for gitdiff would be interpreted as command-line options rather than git refs,...

Security Bulletin: Security vulnerabilities have been found in IBM Application Gateway

Summary Security vulnerabilities have been addressed in IBM Application Gateway Vulnerability Details CVEID:CVE-2026-40355 DESCRIPTION: In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system with a NegoEx mechanism...

Fedora 43 : perl-Imager (2026-ab8bc1220a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ab8bc1220a advisory. 1.032 bump- Fix CVE-2026-13708 and CVE-2026-13705 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 43 : hplip (2026-7d23917d90)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7d23917d90 advisory. fix CVE-2026-14544 - incomplete fix after CVE-2026-8631 fedora2496773, fedora2496772 Tenable has extracted the preceding description block directly...

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

Requirements: Control panel access Permissions to edit an entry Details Control panel users with the ability to edit entries can execute unsandboxed Twig code via the HTTP Referrer header. The issue happens when a user is saving entries. Strings for a signed redirect URL are being compiled as a...

Fedora 44 : chromium (2026-94bb57e96c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-94bb57e96c advisory. chromium-150.0.7871.46 security release includes 433 security fixes, CVE-2026-13774 - CVE-2026-14432 Tenable has extracted the preceding description...

Fedora 44 : perl-Crypt-ScryptKDF (2026-b244acadbe)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b244acadbe advisory. perl-Crypt-ScryptKDF: 0.011 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

openSUSE 16: jline3 / jline3-builtins / jline3-console / jline3-console-ui / etc (openSUSE-SU-2026:21221-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21221-1 advisory. Changes in jline3: unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables bsc1269021 Tenable has extracted the preceding...

Fedora 43 : hut (2026-32113d4817)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-32113d4817 advisory. Update! - Close Go standard library CVE bugs that are solved by a rebuild Tenable has extracted the preceding description block directly from the...

Fedora 43 : opkssh (2026-12d4cde449)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-12d4cde449 advisory. Update bundled golang.org/x/crypto to 0.53.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 43 : thunderbird (2026-2fb5ca48a2)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2fb5ca48a2 advisory. Update to latest upstream version ---- Update to latest upstream version. Tenable has extracted the preceding description block directly from the...

PT-2026-54887

Name of the Vulnerable Software and Affected Versions ThumbPress versions prior to 6.3.2 Description Missing authorization allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a version newer than 6.3.2...

Fedora 44 : hut (2026-ed208f5337)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ed208f5337 advisory. Update! - Close Go standard library CVE bugs that are solved by a rebuild Tenable has extracted the preceding description block directly from the...