Security Update for Microsoft ASP.NET Core (September 2026)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by a denial of service vulnerability as referenced in the vendor advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-report...

openSUSE 16 Security Update : waylyrics (openSUSE-SU-2026:21815-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21815-1 advisory. Changes in waylyrics: - Update to version 0.4.0 CVE-2026-25541 bsc1274106 Added plugin architecture and SakuraLLM translation plugin Added OpenCC suppor...

Fedora 45 : gdk-pixbuf2 (2026-f55d6fc9f8)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f55d6fc9f8 advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 ---- Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768 Tenable...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21816-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21816-1 advisory. Changes in hauler: Update to 2.1.0 bsc1265425, CVE-2026-41888, bsc1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662, . Tenable has extracted...

Fedora 45 : expat (2026-fefd0cbb42)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fefd0cbb42 advisory. Rebase to 2.8.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : mingw-openexr (2026-94344a87fb)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-94344a87fb advisory. Update to openexr 3.4.15 resp 3.3.14. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : libsoup3 (2026-ce24b84bb1)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ce24b84bb1 advisory. Fixes lots of CVEs: see the fixes section for details Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 45 : rclone (2026-612edb2029)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-612edb2029 advisory. Update to 1.75.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 45 : openvpn (2026-17203fb331)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-17203fb331 advisory. Update to upstream 2.7.7 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : rest (2026-4baee57e28)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4baee57e28 advisory. Fix for https://access.redhat.com/security/cve/cve-2026-16615 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 45 : bubblewrap (2026-de382db258)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-de382db258 advisory. Update to 0.12.0 Fixes GHSA-pxhw-h44j-8pfx Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 45 : dokuwiki (2026-2ec7f70c76)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2ec7f70c76 advisory. Update to version 2026-07-14c security hotfix update - see https://github.com/dokuwiki/dokuwiki/issues/4752 Tenable has extracted the preceding description...

Fedora 45 : mingw-expat (2026-9e9244744d)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9e9244744d advisory. Update to expat-2.8.4. ---- Update to expat-2.8.3. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 45 : rust-webbrowser (2026-64307ca6fb)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-64307ca6fb advisory. Update to version 1.2.4. This includes a fix for RUSTSEC-2026-0257. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 45 : open62541 (2026-8c3244fdc6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8c3244fdc6 advisory. Update to 1.5.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Important: Red Hat Security Advisory: Red Hat AMQ Broker 7.13.6 release and security update

Red Hat AMQ Broker 7.13.6 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Infinite loop

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Infinite loop through the POST /api/v1/folders/id/update/parent handler, which allows a folder to be moved under itself or one of its subfolders, creating a cycle in the folder hierarchy. An attacker can caus...

CVE-2026-49838

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-49838

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-49838 GoBGP confederation validation panics on empty AS_PATH attribute

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...