Fedora 43 : freerdp (2026-e2afc3151d)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e2afc3151d advisory. Update to 3.28.0 It fixes CVE-2026-57156, CVE-2026-57157 and CVE-2026-57158. Tenable has extracted the preceding description block directly from the...

RockyLinux 8 : kernel (RLSA-2026:39179)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:39179 advisory. kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete...

Oracle Linux 9 : libxml2 (ELSA-2026-39317)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39317 advisory. 2.9.13-14.2 - Fix CVE-2025-6170 RHEL-182016 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

SUSE SLES12: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:2987-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2987-1 advisory. - CVE-2026-5435: resolv: More types as unknown in nssprintrrf bsc1263656, BZ 34033 - resolv: Check for inetntop failure in nssprintrrf -...

Oracle Linux 10 : glibc (ELSA-2026-19061)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19061 advisory. - resolv: Check hostname for validity CVE-2026-4438 - resolv: Count records correctly CVE-2026-4437 Tenable has extracted the preceding description...

SUSE SLED15 / SLES15 Security Update : perl-libwww-perl (SUSE-SU-2026:2962-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2962-1 advisory. This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: LWP: UserAgent: Authorization and...

Linux Distros Unpatched Vulnerability : CVE-2026-59885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time...

Linux Distros Unpatched Vulnerability : CVE-2026-15043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE...

Linux Distros Unpatched Vulnerability : CVE-2026-62644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which...

Oracle Linux 9 : cups (ELSA-2026-39316)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39316 advisory. 1:2.3.3op2-39 - RHEL-177957 CVE-2026-34980 cups: control character injection in option values Tenable has extracted the preceding description block directly fr...

Splunk Enterprise 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0702)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0702 advisory. - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0,...

Ubuntu 26.04 LTS : MariaDB vulnerabilities (USN-8536-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8536-1 advisory. It was discovered that MariaDB did not properly validate parameters supplied by a joiner node during a State Snapshot Transfer using the mariabackup...

Oracle Linux 9 : PackageKit (ELSA-2026-19354)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19354 advisory. 1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch Tenable has extracted the preceding description block directly from the Oracle...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Wget vulnerabilities (USN-8543-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8543-1 advisory. It was discovered that Wget mishandled semicolons in the userinfo subcomponent of...

RHEL 9 : python3.12 (RHSA-2026:39771)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39771 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 8 : pacemaker (RHSA-2026:39322)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39322 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in t...

SUSE SLED15 / SLES15 Security Update : python3-dulwich (SUSE-SU-2026:2984-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2984-1 advisory. - CVE-2026-47734: Do not honour receive.maxInputSize to bound received packs bsc1268138 Tenable has extracted the...

Oracle Linux 10 : mingw-glib2 (ELSA-2026-18344)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18344 advisory. 2.87.0-1 - Update to 2.87.0 - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in gescapeuristring Tenable has extracted the preceding descriptio...

Fedora 45 : ruby (2026-7f499e0362)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7f499e0362 advisory. Ruby 4.0.6 is released. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SUSE SLED15 / SLES15 Security Update : python-mistune (SUSE-SU-2026:2949-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2949-1 advisory. This update for python-mistune fixes the following issue - CVE-2026-44898: improper sanitization of user-supplied HTML...

RockyLinux 8 : go-toolset:rhel8 (RLSA-2026:38995)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38995 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 crypto/x509: golang:...

SUSE SLES15 Security Update : kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:2930-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2930-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: -...

RHEL 10 : kernel (RHSA-2026:39371)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39371 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: proc: use the same treatment...

Oracle Linux 10 : postgresql16 (ELSA-2026-19010)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19010 advisory. 16.13-1.0.1 - Replace upstream reference Orabug: 37044148 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 8 : kernel (ELSA-2026-39083)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-39083 advisory. - locking/rtmutex: Skip removewaiter when waiter is not enqueued Phil Auld RHEL-193334 CVE-2026-53166 - rtmutex: Use waiter::task instead of current i...

Oracle Linux 9 : kernel (ELSA-2026-36645)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36645 advisory. - eventpoll: fix epremove struct eventpoll / struct file UAF Ian Kent RHEL-180773 CVE-2026-46242 - eventpoll: defer struct eventpoll free to RCU grace...

RockyLinux 8 : perl-DBI:1.641 (RLSA-2026:38901)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38901 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...

SUSE SLES12 Security Update : kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:2992-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2992-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: -...

RHEL 9 : Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) (RHSA-2026:39810)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:39810 advisory. Security Fixes: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 golang: Denial of Service due to excessive...

Oracle Linux 10 : buildah (ELSA-2026-19032)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19032 advisory. - Rebuild for new golang to address CVE-2025-68121 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2026-19049)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-19049 advisory. - rebuilt to fix CVE-2026-27137, CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

SUSE SLES12: gnutls / libgnutls-devel / libgnutls-openssl-devel / etc (SUSE-SU-2026:2924-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2924-1 advisory. This update for gnutls fixes the following issues - CVE-2026-3833: incorrectly accepted domain names due to comparison during name constraints...

Oracle Linux 9 : libsolv (ELSA-2026-39315)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39315 advisory. 0.7.24-6 - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178982 Tenable has extracted the preceding description block directly from t...

SUSE SLES12: farstream-data / farstream-devel / finch / finch-devel / etc (SUSE-SU-2026:2967-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2967-1 advisory. This update for libgnt, meson, pidgin fixes the following issues Security issue: - CVE-2019-25544: denial of service vulnerability that allows local...

Linux Distros Unpatched Vulnerability : CVE-2026-15714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soupmultipartinputstreamreadheaders function...

Linux Distros Unpatched Vulnerability : CVE-2026-15711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 5.5, which...

Security Updates for Microsoft Office Products (July 2026) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the july-14-2026 advisory. - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-55045 - Stack-based buffer overflow i...

AlmaLinux 8 : cifs-utils (ALSA-2026:39575)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39575 advisory. cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall CVE-2026-12505 Bug Fixes and Enhancements: add sssd method for mappin...

RHEL 10 : edk2 (RHSA-2026:39297)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39297 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware...

Debian dla-4684 : opam - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4684 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4684-1 [email protected] https://www.debian.org/lts/security/...

RockyLinux 9 : libxml2 (RLSA-2026:39317)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39317 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly from th...

SUSE SLED15 / SLES15 Security Update : python-WebOb (SUSE-SU-2026:2982-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2982-1 advisory. This update for python-WebOb fixes the following issue - CVE-2026-44889: Location header normalization during redirect...

Debian dla-4685 : grub-common - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4685 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4685-1 [email protected]...

RockyLinux 10 : cups (RLSA-2026:39302)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39302 advisory. cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 Tenable has extracted...

SUSE SLES12 Security Update : patch (SUSE-SU-2026:2922-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2922-1 advisory. This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via anotherhunk function bsc1194037. - CVE-2026-56288: craft...

RHEL 9 : Red Hat OpenStack Services on OpenShift 18.0 (openstack-glance) (RHSA-2026:39812)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39812 advisory. OpenStack Image Service code-named Glance provides discovery, registration, and delivery services for virtual disk images. The Image Service API...

RHEL 9 : Red Hat OpenStack Services on OpenShift 18.0 (openstack-ironic) (RHSA-2026:39811)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39811 advisory. Ironic is a project which aims to provision bare metal as opposed to virtual machines by leveraging common technologies such as PXE boot and IPMI to...

AlmaLinux 8 : kernel (ALSA-2026:39179)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:39179 advisory. kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete...

Google Chrome < 150.0.7871.124 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 150.0.7871.124. It is, therefore, affected by multiple vulnerabilities as referenced in the 202607stable-channel-update-for-desktop0353146366 advisory. - Use after free in UI in Google Chrome on Linux prior to...

SUSE SLES12 Security Update : dnsmasq (SUSE-SU-2026:2974-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2974-1 advisory. This update for dnsmasq fixes the following issues - CVE-2026-12725: heap buffer overflow in logquery when logging unsupported DS/DNSKEY replie...