SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2026:2981-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:2981-1 advisory. This update for ucode-intel fixes the following issue: - CVE-2025-35979: data leaks fixed in 20260512 release bsc1265189. Changes for ucode-intel: -...

AlmaLinux 9 : python3.9 (ALSA-2026:39798)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39798 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Bug Fixes and Enhancements: python3.9 testssl...

Debian dsa-6388 : libxfont-dev - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6388 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6388-1 [email protected] https://www.debian.org/securit...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-56288)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-56288 advisory. - GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted...

AlmaLinux 10 : go-fdo-client and go-fdo-server (ALSA-2026:22141)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:22141 advisory. crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificat...

Oracle Linux 10 : skopeo (ELSA-2026-19031)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19031 advisory. - Rebuild for new golang to address CVE-2025-68121 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 10 : podman (ELSA-2026-19017)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19017 advisory. - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE Tenable has extracted the preceding description block directly from the...

Oracle Linux 10 : delve (ELSA-2026-19013)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19013 advisory. 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update Delve to version 1.26.1 Tenable has extracted the precedin...

RHEL 10 : yggdrasil (RHSA-2026:39573)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39573 advisory. yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate chil...

MiracleLinux 8 : grafana-9.2.10-31.el8_10 (AXSA:2026-1261:19)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1261:19 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...

MiracleLinux 9 : firefox-140.10.1-1.el9_8.ML.1 (AXSA:2026-1263:15)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1263:15 advisory. firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 CVE-2026-7323 firefox: thunderbird: Information disclosur...

Oracle Linux 10 : corosync (ELSA-2026-19043)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19043 advisory. - totemsrp: Return error if sanity check fails fixes CVE-2026-35091 - totemsrp: Fix integer overflow in membjoinsanity fixes CVE-2026-35092 Tenable h...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1264:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1264:01 advisory. 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND CVE-2026-11610 389-ds-base: 389-ds-base: integer overflow in SAS...

RHEL 10 : libinput (RHSA-2026:39296)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39296 advisory. libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security...

Fedora 44 : freerdp (2026-931f893f1b)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-931f893f1b advisory. Update to 3.28.0 It fixes CVE-2026-57156, CVE-2026-57157 and CVE-2026-57158. Tenable has extracted the preceding description block directly from the...

Cisco Identity Services Engine (cisco-sa-ise-traversal-xNt7wb2Y)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating...

SUSE SLES15 Security Update : kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:2920-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2920-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.173 fixes various security issues The following security issues were fixed: ...

AlmaLinux 8 : git-lfs (ALSA-2026:39266)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:39266 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 Tenable has extracted the preceding description block directl...

SUSE SLES15 Security Update : kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:2943-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2943-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:2961-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2961-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues The following security issues were fixed: ...

RHEL 9 : cups (RHSA-2026:39316)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:39316 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups:...

Oracle Linux 10 : python3.12 (ELSA-2026-19064)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19064 advisory. - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 -...

Oracle Linux 10 : systemd (ELSA-2026-19068)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19068 advisory. 257-23.0.1.el102.1 - Fix detection of Oracle Virtualization or BM envs Orabug: 37531877 - Avoid udevadm warnings when using udev valid configs Orabug: 3750319...

Fedora 45 : fasterxml-oss-parent / jackson-annotations / jackson-bom / etc (2026-ddde3cf003)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-ddde3cf003 advisory. Rebase to 2.21.5 to solve the CVE-2026-54518, CVE-2026-54517, CVE-2026-54516, CVE-2026-54515, CVE-2026-54513, CVE-2026-54512 Tenable has extracted t...

Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2026-19049)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19049 advisory. - rebuilt to fix CVE-2026-27137, CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

SUSE SLES15 Security Update : kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:2930-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2930-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: -...

Oracle Linux 8 : kernel (ELSA-2026-39083)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-39083 advisory. - locking/rtmutex: Skip removewaiter when waiter is not enqueued Phil Auld RHEL-193334 CVE-2026-53166 - rtmutex: Use waiter::task instead of current i...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-56289)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-56289 advisory. - GNU patch is vulnerable to a denial of service DoS due to improper validation of hunk single...

Linux Distros Unpatched Vulnerability : CVE-2026-15712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer over-read vulnerability was discovered in libsoup's versions: libsoup 3.0 to 3.7.0 HTTP/2 connection tracking framework. When the library processe...

RHEL 8 : thunderbird (RHSA-2026:39428)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:39428 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape in the DOM: Workers...

Oracle Linux 9 : libreoffice (ELSA-2026-36832)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36832 advisory. - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : libsolv (ELSA-2026-39315)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39315 advisory. 0.7.24-6 - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178982 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : python-pillow (ELSA-2026-39127)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-39127 advisory. 5.1.1-22 - Security fix for CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380 Resolves: RHEL-192830, RHEL-192770, RHEL-192684, RHEL-19273...

SonicWall SMA 1000 Series <= 12.4.3-03434 / 12.5.x <= 12.5.0-02800 Multiple Vulnerabilities (SNWLID-2026-0008)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface. A remote, unauthenticated attacker could potentially cause the appliance to make requests to an...

AlmaLinux 10 : libxml2 (ALSA-2026:39304)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39304 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly from th...

RHEL 8 : perl-XML-LibXML (RHSA-2026:39878)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:39878 advisory. This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module...

RHEL 8 : cifs-utils (RHSA-2026:39575)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39575 advisory. The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for...

RHEL 9 : qemu-kvm (RHSA-2026:39311)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39311 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

Linux Distros Unpatched Vulnerability : CVE-2026-59733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --private-rep...

SUSE SLED15 / SLES15 Security Update : perl-HTML-Parser (SUSE-SU-2026:2950-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2950-1 advisory. This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl...

SUSE SLES15 Security Update : kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:2989-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2989-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues The following security issues were fixed: ...

Splunk Enterprise 9.3.0 < 9.3.14, 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0703)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0703 advisory. - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below...

AlmaLinux 9 : git-lfs (ALSA-2026:39319)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:39319 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 Tenable has extracted the preceding description block directl...

Oracle Linux 10 : sudo (ELSA-2026-19067)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19067 advisory. - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls - Resolves: RHEL-164620 - CVE-2026-35535 sudo...

SUSE SLES15 Security Update : kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:2932-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2932-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues The following security issues were fixed: ...

Linux Distros Unpatched Vulnerability : CVE-2026-15713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream...

RockyLinux 9 : pacemaker (RLSA-2026:39323)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39323 advisory. pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVE-2026-10649 Tenable has extracted the preceding description block...

Oracle Linux 10 : postgresql16 (ELSA-2026-19010)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19010 advisory. 16.13-1.0.1 - Replace upstream reference Orabug: 37044148 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Google Chrome < 150.0.7871.124 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 150.0.7871.124. It is, therefore, affected by multiple vulnerabilities as referenced in the 202607stable-channel-update-for-desktop0353146366 advisory. - Use after free in UI in Google Chrome on Linux prior to...

RockyLinux 8 : perl-DBI:1.641 (RLSA-2026:38901)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38901 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...