EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-4483)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated arra...

EulerOS 2.0 SP12 : environment-modules (EulerOS-SA-2026-4401)

According to the versions of the environment-modules packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in...

EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-4513)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan...

EulerOS 2.0 SP12 : python-pillow (EulerOS-SA-2026-4446)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap r...

RHEL 8 : webkit2gtk3 (RHSA-2026:95403)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95403 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia:...

Rocky Linux 10.2 [CIQ] Security Update: tesseract / tesseract-debuginfo / tesseract-debugsource / etc Multiple Vulnerabilities (crlsa-2026_95085)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695085 advisory. tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data CVE-2026-88048 tesseract: Tesseract: Stack buffe...

EulerOS 2.0 SP12 : rsyslog (EulerOS-SA-2026-4529)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

RHEL 8 : kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_161_1 (RHSA-2026:95601)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95601 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

EulerOS 2.0 SP12 : perl-DBI (EulerOS-SA-2026-4437)

According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and...

Linux Distros Unpatched Vulnerability : CVE-2026-92695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parsepacket callback in src/pcapplugin/pcapcollector.cpp is...

Slackware Linux 15.0 / current openssh Vulnerability (SSA:2026-309-01)

The version of openssh installed on the remote host is prior to 10.6p2. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-309-01 advisory. New openssh packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...

EulerOS 2.0 SP12 : python-setuptools (EulerOS-SA-2026-4449)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileLis...

EulerOS 2.0 SP12 : pam (EulerOS-SA-2026-4510)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in...

SUSE SLES12 Security Update : kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:5048-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5048-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: -...

EulerOS 2.0 SP12 : patch (EulerOS-SA-2026-4511)

According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a denial of service DoS due to improper validation of hunk single block of changes in diff line offsets in unified-diff...

EulerOS 2.0 SP12 : bison (EulerOS-SA-2026-4469)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Bison improperly handles grammardefined output paths. Grammar directives such as %output and %header allow specifying file paths, which are...

RockyLinux 10 : kernel (RLSA-2026:95367)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95367 advisory. kernel: writeback: fix race between cgroupwritebackumount and inodeswitchwbs CVE-2026-64378 kernel: sunrpc: pin svcxprt across the asynchronous TLS...

Linux Distros Unpatched Vulnerability : CVE-2026-107479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application...

TeamViewer < 13.2.154008 / 14.x < 14.7.48868 / 15.x < 15.83 Multiple Vulnerabilities (Linux) (TV-2026-1011)

The version of TeamViewer installed on the remote Linux host is prior to 13.2.154008, 14.x prior to 14.7.48868, or 15.x prior to 15.83. It is, therefore, affected by multiple vulnerabilities as referenced in the TV-2026-1011 advisory: - An out-of-bounds write vulnerability in the screen-image...

AlmaLinux 9.6 [TuxCare] Security Update: libpcap / libpcap-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793973527)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793973527 advisory. - libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In...

MiracleLinux 8 : [security - high] gimp:2.8 (AXSA:2026-2277:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2277:01 advisory. gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader loadresource1033 CVE-2026-112257 Bug Fixes and Enhancements: gimp: xpm poc file fo...

RHEL 9 : libX11 (RHSA-2026:95496)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95496 advisory. The libX11 packages contain the core X11 protocol client library. Security Fixes: libX11: libX11: Heap-based buffer overflow via malicious X server...

FreeBSD : Elixir -- multiple vulnerabilities (c084ccd3-efb8-4fda-aeb9-04bf715d0b55)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c084ccd3-efb8-4fda-aeb9-04bf715d0b55 advisory. Elixir reports: Tenable has extracted the preceding description block directly from the FreeBS...

Apache ZooKeeper 3.8.x < 3.8.8 / 3.9.x < 3.9.7 Multiple Vulnerabilities

The version of Apache ZooKeeper listening on the remote host is 3.8.x prior to 3.8.8 or 3.9.x prior to 3.9.7. It is, therefore, affected by multiple vulnerabilities: - Incorrect authorization due to a time-of-check to time-of-use TOCTOU race condition in the setACL request handling of Apache...

Fedora 44 : tailscale (2026-c8bfae6071)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c8bfae6071 advisory. update to 1.102.5 ---- update to 1.98.10, fix several cves Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 44 : scribus (2026-d407c720c8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d407c720c8 advisory. 1.6.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

RHEL 9 : resteasy (RHSA-2026:95504)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95504 advisory. RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully...

EulerOS 2.0 SP12 : python3 (EulerOS-SA-2026-4527)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Oracle Solaris Third Party Bulletin announces patches for one or more security vulnerabilities addressed in third party software that is...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.2:CLSA-2026:1793956786)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793956786 advisory. - A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted...

RockyLinux 9 : nodejs:18 (RLSA-2023:4330)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4330 advisory. nodejs: mainModule.proto bypass experimental policy mechanism CVE-2023-30581 nodejs: process interuption due to invalid Public Key information in x509...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:5102-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5102-1 advisory. - Refresh patch for CVE-2026-92925: failure to properly validate string-carrying extensions for null- termination in the cluster bus packet...

Fedora 44 : perl-Starman (2026-2106e35a84)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2106e35a84 advisory. Starman 0.4019 fixes several CVEs: Stream chunked request bodies to the temporary buffer instead of holding whole chunks in memory CVE-2026-115824...

RHEL 8 : ruby:2.5 (RHSA-2026:95513)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95513 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

AlmaLinux 9.2 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc (ALMALINUX9.2:CLSA-2026:1793963335)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793963335 advisory. - A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execu...

EulerOS 2.0 SP12 : ruby (EulerOS-SA-2026-4453)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : REJECTED Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security...

EulerOS 2.0 SP12 : libtiff (EulerOS-SA-2026-4497)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in...

JetBrains WebStorm < 2025.3.6.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Certificate Validation (CVE-2026-118696)

The version of JetBrains WebStorm installed on the remote host is prior to 2025.3.6.2, or is 2026.1.x prior to 2026.1.5.1, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a vulnerability: - In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2....

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150620 advisory. Unity Link Advisory UTSA-2026-150620 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

MiracleLinux 8 : kernel-4.18.0-553.181.1.el8_10 (AXSA:2026-2276:118)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2276:118 advisory. kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option...

MiracleLinux 9 : thunderbird-153.5.0-1.el9_8.ML.1 (AXSA:2026-2271:26)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2271:26 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764...

EulerOS 2.0 SP12 : sg3_utils (EulerOS-SA-2026-4455)

According to the versions of the sg3utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...

Linux Distros Unpatched Vulnerability : CVE-2026-85068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.4.2 through...

AlmaLinux 9.6 [TuxCare] Security Update: libXi / libXi-devel (ALMALINUX9.6:CLSA-2026:1793984702)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793984702 advisory. - A malicious X server could cause a heap overflow by injecting a large DEVICEENABLE reply when processed by libXi before 1.8.4...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150629 advisory. Unity Link Advisory UTSA-2026-150629 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

EulerOS 2.0 SP12 : python-pip (EulerOS-SA-2026-4524)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even...

Squid 5.x < 7.7 Stack-based Buffer Overflow (SQUID-2026:7)

The version of Squid on the remote host is 5.x, 6.x or 7.x prior to 7.7. It is, therefore, affected by a stack-based buffer overflow vulnerability: - Due to an Improper Input Validation bug, Squid is vulnerable to a stack-based buffer overflow attack against HTTP authentication. This problem allo...

EulerOS 2.0 SP12 : mariadb-connector-c (EulerOS-SA-2026-4425)

According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validat...

Linux Distros Unpatched Vulnerability : CVE-2026-116641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DB Tools rely on the TLS implementation in Golang's standard library, which generally uses the system CA store. However, the crypto/x509 package also has it...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-4408)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a...

Linux Distros Unpatched Vulnerability : CVE-2026-123876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AFVSOCK and NETLINKAUDIT compared socket arguments with...