MiracleLinux 9 : lrzsz-0.12.20-58.el9_8 (AXSA:2026-2168:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2168:02 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146304 advisory. In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the receiv...

Linux Distros Unpatched Vulnerability : CVE-2026-101756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: GIS. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-98918

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page- aligned address in damonptepmkold damonvaprepareaccesschec...

Oracle Linux 10 : emacs (ELSA-2026-90887)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90887 advisory. - Fix arbitrary code execution upon opening file CVE-2026-96269 - Generalize trusted-content-p check to all Flymake backends CVE-2026-96442 Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-115723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers ...

CentOS Linux 8.5 [TuxCare] Security Update: cpp / gcc / gcc-c++ / gcc-gdb-plugin / gcc-gfortran / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1793103045)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793103045 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the library...

RockyLinux 9 : bind (RLSA-2026:89745)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:89745 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-98960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: don't stash iouring encoded data across -EAGAIN Returning -EAGAIN while leaving btrfsuringencodeddata in the cmd PDU leaks if the request is cancelled or...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146330 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list deletion Queue wake, stop, and disable paths walk...

Linux Distros Unpatched Vulnerability : CVE-2026-104592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial o...

Linux Distros Unpatched Vulnerability : CVE-2026-98923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: io: Reject non-user protection in ioremapprot Mapping a stack-top page via /dev/mem with PROTNONE and then reading that process's /proc//cmdline triggers...

Oracle Linux 8 : kernel (ELSA-2026-87375)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87375 advisory. - vfio/pci: clear vdev-msiperm after freeing it on init failure Rodolfo Vick RHEL-270905 CVE-2026-89777 - ALSA: seq: close a re-opened queue timer in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146297 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout lpc32xxxmitdma waits for the DM...

TencentOS Server 3: firefox (TSSA-2026:1215)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1215 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CentOS Linux 8 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS-STREAM8:CLSA-2026:1793098806)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1793098806 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destinati...

TencentOS Server 3: expat (TSSA-2026:1212)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1212 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-98872

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - freevxfs: don't BUG on unknown typed-extent type vxfsbmaptyped handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent wi...

Linux Distros Unpatched Vulnerability : CVE-2026-98870

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: remove stale channels from all sessions on teardown ksmbdsessionsderegister removes a connection's channels from other sessions' channel lists only whil...

SUSE SLED15: cpp7 / cross-nvptx-gcc7 / cross-nvptx-newlib7-devel / gcc7 / etc (SUSE-SU-2026:4913-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4913-1 advisory. - CVE-2026-95619: libstdc++ integer overflow in new operator bsc1282500. - CVE-2026-102010: UAF due to imprope...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146345)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146345 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HWprovided UAR index rather than the SW one Free the UAR index returned by...

AlmaLinux 10 : xdg-dbus-proxy (ALSA-2026:90523)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:90523 advisory. xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape CVE-2026-94422 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-104591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libosmocore through 1.14.1 contains a buffer overflow in osmoiuupcomputepayloadcrc in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service...

TencentOS Server 4: python-urllib3 (TSSA-2026:1192)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1192 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-65632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jose library accepts ECDSA ES256, ES256K, ES384, and ES512 JWS signatures of a non-canonical length. When verifying an ECDSA signature, josejwkktyec:verify/...

Linux Distros Unpatched Vulnerability : CVE-2026-99000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Fix shrinker accounting double-subtraction on nested external pins xebopinexternal and xebounpinexternal support nested pins, since the underlying...

SUSE SLES15: kubernetes1.37-client / kubernetes1.37-client-bash-completion / etc (SUSE-SU-2026:4901-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4901-1 advisory. This update for kubernetes rebuilds it against the current go security release. Tenable has extracted the preceding description block direct...

Linux Distros Unpatched Vulnerability : CVE-2026-116578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL templates can place regex-capture...

AlmaLinux 9.2 [TuxCare] Security Update: libical / libical-devel / libical-glib / libical-glib-devel / etc (ALMALINUX9.2:CLSA-2026:1793109502)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793109502 advisory. - libical through 4.0.6 contains a heap-based out-of-bounds read in icalvaluedecodeicalstring in src/libical/icalvalue.c when decoding input...

Hitachi Energy RTU500 Download of Code Without Integrity Check (CVE-2023-46143)

A download of code without integrity check vulnerability in Hitachi Energy RTU500 allows an unauthenticated remote attacker to modify some or all applications running on the device. Successful exploitation could result in unauthorized modification of device functionality or disruption of its...

TencentOS Server 2: kernel (TSSA-2026:1223)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1223 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146335 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dmareleasechannel, check chan-device-privatecnt after...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146329 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then...

AlmaLinux 8 : python-urllib3 (ALSA-2026:90759)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:90759 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 Tenable has extracted the preceding description block directly...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146126)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146126 advisory. MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc. Tenable has...

Redis < 7.2.14 / 7.4.x < 7.4.9 / 8.2.x < 8.2.6 / 8.4.x < 8.4.3 / 8.6.x < 8.6.3 / 8.8.x < 8.8-RC1 Multiple Vulnerabilities

The version of Redis installed on the remote host is prior to 7.2.14, or 7.4.x prior to 7.4.9, or 8.2.x prior to 8.2.6, or 8.4.x prior to 8.4.3, or 8.6.x prior to 8.6.3, or 8.8.x prior to 8.8-RC1. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability exists in...

TencentOS Server 4: emacs (TSSA-2026:1185)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1185 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-101752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are MySQL...

RockyLinux 10 : libreswan (RLSA-2026:89923)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89923 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: Denial of Service via sending bogus X.509 certificates...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146339)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146339 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for RSA Reject requests with a source buffer that is bigger than th...

RockyLinux 10 : freeipmi (RLSA-2026:89905)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89905 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code executi...

Linux Distros Unpatched Vulnerability : CVE-2026-98963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: always return -EIOCBQUEUED after btrfsuringreadextentendio If all bios finish before btrfsencodedreadregularfillpages returns, it calls...

RockyLinux 9 : xz (RLSA-2026:89749)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:89749 advisory. xz: XZ Utils: Denial of Service via buffer overflow in index decoding CVE-2026-34743 Tenable has extracted the preceding description block directly from the...

CentOS Linux 8.5 [TuxCare] Security Update: pacemaker / pacemaker-cli / pacemaker-cluster-libs / pacemaker-cts / etc (CENTOS8.5:CLSA-2026:1793099293)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793099293 advisory. - A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message...

Linux Distros Unpatched Vulnerability : CVE-2026-99042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/net: populate CONNECT filter fields for 24-byte sockaddrin6 ioconnectbpfpopulate fil...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146264)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146264 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps cephhandlecaps reads...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146331)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146331 advisory. In the Linux kernel, the following vulnerability has been resolved: net: Fix an unsafe loop on the list The kernel may crash when deleting a genetlink family if ther...

Linux Distros Unpatched Vulnerability : CVE-2026-115907

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built with the legacy-zip feature can...

Linux Distros Unpatched Vulnerability : CVE-2026-115922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, unpack2bit and unpack4bit resize unpacked arrays...

TencentOS Server 4: freerdp (TSSA-2026:1194)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1194 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...