AlmaLinux 9 : kernel (ALSA-2026:87805)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:87805 advisory. kernel: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets CVE-2025-22063 kernel: calipso: Don't call calipso functions for AFINET sk...

Linux Distros Unpatched Vulnerability : CVE-2026-98939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible deadlock as soon as kswapd shrinks the TTM page poo...

Linux Distros Unpatched Vulnerability : CVE-2026-115371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability that allows restricted TLS clients to read...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : Brotli vulnerability (USN-8956-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8956-1 advisory. It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to...

AlmaLinux 10 : brotli (ALSA-2026:90449)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:90449 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the AlmaLinux security...

TencentOS Server 3: postgresql:12 (TSSA-2026:1216)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1216 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146141 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146144 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft AH6 rearranges routing-header addresses before...

AlmaLinux 8 : kernel-rt (ALSA-2026:89082)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:89082 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...

Oracle Linux 10 : firefox (ELSA-2026-89758)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-89758 advisory. 153.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...

RockyLinux 8 : kernel-rt (RLSA-2026:89082)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89082 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...

AlmaLinux 8 : brotli (ALSA-2026:90501)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:90501 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the AlmaLinux security...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_89082)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689082 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...

Security Update for Microsoft .NET Core (October OOB 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70197 -...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-146122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146122 advisory. A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated...

MiracleLinux 9 : brotli-1.0.9-10.el9_8.1 (AXSA:2026-2167:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2167:04 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the MiracleLinux...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146120 advisory. In PHP versions 8.2. before 8.2.32, 8.3. before 8.3.32, 8.4. before 8.4.23, 8.5. before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contain...

Linux Distros Unpatched Vulnerability : CVE-2026-101620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

AlmaLinux 8 : kernel (ALSA-2026:89083)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:89083 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel:...

Oracle Linux 8 : kernel (ELSA-2026-89816)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-89816 advisory. - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CKI Backport Bot RHEL-277607 CVE-2026-74515 - selinux: avoid sksocket dereference in...

TencentOS Server 3: php:8.2 (TSSA-2026:1209)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1209 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Rocky Linux 9.2 [CIQ] Security Update: brotli / brotli-devel / libbrotli / python3-brotli (ciqsa-2026_1720)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261720 advisory. This advisory aggregates security fixes for the brotli SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-111497. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.2:CLSA-2026:1793099189)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793099189 advisory. - Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names e.g., Content-Length and...

Google Chrome < 156.0.8078.73 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 156.0.8078.73. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop0562499947 advisory. - Use after free in Forms in Google Chrome prior to 156.0.8078.73...

Google Chrome < 156.0.8078.73 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 156.0.8078.73. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop0562499947 advisory. - Use after free in Forms in Google Chrome prior to 156.0.8078.73...

TencentOS Server 4: dpdk (TSSA-2026:1186)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1186 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : nginx vulnerabilities (USN-8955-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8955-1 advisory. It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite...

Mozilla Firefox ESR < 115.44

The version of Firefox ESR installed on the remote Windows host is prior to 115.44. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-119 advisory. - Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in...

Mozilla Firefox ESR < 153.6

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-120 advisory. - Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4,...

Mozilla Firefox < 159.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 159.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-118 advisory. - Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159...

Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793135406)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793135406 advisory. - Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution ...

RockyLinux 10 : oci-seccomp-bpf-hook (RLSA-2026:89752)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89752 advisory. net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 net/http: golang: golang: Denial of Servic...

MiracleLinux 8 : kernel-4.18.0-553.178.1.el8_10 (AXSA:2026-2162:109)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2162:109 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388...

Oracle Linux 9 : buildah (ELSA-2026-90424)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90424 advisory. - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Update to buildah 1.43.4 c7061d00 - fix CVE-2026-56855 golang.org/x/crypto/ssh DoS and CVE-2025-113...

AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793135406)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793135406 advisory. - Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is...

Linux Distros Unpatched Vulnerability : CVE-2026-116486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator...

Linux Distros Unpatched Vulnerability : CVE-2026-98887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211hwsim: reject undersized HWSIMATTRTXINFO hwsimtxinfoframereceivednl casts the HWSIMATTRTXINFO payload to a struct hwsimtxrate and unconditionally...

Linux Distros Unpatched Vulnerability : CVE-2026-98892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Validate BASEERROREVENT payload size BASEERROREVENT carries a variable number of message reports, with the count encoded in errorstatus. The...

Linux Distros Unpatched Vulnerability : CVE-2026-98915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: video-i2c: use vb2videounregisterdevice on driver removal The driver uses vb2foprelease as its file release operation, so vb2videounregisterdevice should...

Linux Distros Unpatched Vulnerability : CVE-2026-116612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer Editing Services gst-editing-services. A GES project file can embed an arbitrary GStreamer pipeline description as an effect...

TencentOS Server 4: freerdp (TSSA-2026:1205)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1205 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-116542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote unauthenticated clients to alter hostnames via JNI...

Linux Distros Unpatched Vulnerability : CVE-2026-99050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: mpsse: fix race when arming the IRQ poll worker gpiompsseirqenable arms the poll worker before publishing it: schedulework runs before the worker is added...

Linux Distros Unpatched Vulnerability : CVE-2026-99017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: errata: select RISCVALTERNATIVEEARLY for THEAD GHOSTWRITE errataprobeghostwrite only marks the CPU as vulnerable when it is called at the...

RockyLinux 8 : xorg-x11-server (RLSA-2026:89747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89747 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

Linux Distros Unpatched Vulnerability : CVE-2026-98927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix life cycle of the nestedmmus array The nestedmmus array holds the shadow...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146284)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146284 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctpprocessstrresetinreq When processing a RESETINREQUEST from a...

CentOS Linux 8.4 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.4:CLSA-2026:1793098772)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793098772 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination...

TencentOS Server 4: libX11 (TSSA-2026:1184)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1184 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

RockyLinux 9 : bind9.18 (RLSA-2026:89746)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:89746 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 Tenable has extracted the preceding description block directly from the...