Linux Distros Unpatched Vulnerability : CVE-2026-115375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host...

Linux Distros Unpatched Vulnerability : CVE-2026-98884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: core: Add validation for host-provided maxsegs The maxsegs field is of type unsigned short, and if a host driver sets an excessively large value, it may be...

MiracleLinux 9 : kernel-5.14.0-687.50.1.el9_8 (AXSA:2026-2164:110)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2164:110 advisory. kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: iommu/vt-d: Clear Present bit before tearing down PASID...

Fedora 46 : sofia-sip (2026-4157a13c05)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4157a13c05 advisory. Automatic update for sofia-sip-1.13.18-2.fc46. Changelog Tue Oct 27 2026 Tomi Lhteenmki - 1.13.18-2 - Patch for oversized MIME boundary fedora2554363 Tenable...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146285 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Use stronger register read/writes to assure ordering GCC12 appears to be much...

Linux Distros Unpatched Vulnerability : CVE-2026-99011

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: SCO: serialise scoconn lifetime against scorecvscodata scorecvscodata upgrades the weak hcon-scodata back-pointer to a strong reference under...

Linux Distros Unpatched Vulnerability : CVE-2026-98911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpaa2-switch: fix the error path in dpaa2switchrx In case of an error in dpaa2switchrx, the dpaa2switchfreefd function is called in order to free the FD. This i...

Linux Distros Unpatched Vulnerability : CVE-2026-101637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146259 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling sk pointer in ieee802154create sockinitdata attaches the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146296)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146296 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicate...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146151 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusi...

TencentOS Server 4: pcs (TSSA-2026:1187)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1187 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146143 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the...

Oracle GoldenGate 21.x < 21.24.0.0.0 (October 2026 CPU)

The 21.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in Oracle GoldenGate component: Admin Server Executable. Supported versions that are affected are 21.3-21.23. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-116467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file...

Linux Distros Unpatched Vulnerability : CVE-2026-98919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjustidledly against divide-by-zero and overflow adjustidledly has several...

Linux Distros Unpatched Vulnerability : CVE-2026-98962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: free iov when btrfsuringreadextent fails After btrfsuringreadextent, the caller always jumped to outacct. That skips kfreedata-iov, which is only correct...

Planet Technology Planet WGS-804HPT Stack-Based Buffer Overflow (CVE-2024-48871)

PLANET WGS-804HPT is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution. This plugin only works with...

Linux Distros Unpatched Vulnerability : CVE-2026-99013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: Reject concurrent BIS listener setup isosocklisten drops the socket lock before calling isolistenbis to preserve the hdev-lock ordering. Two...

Linux Distros Unpatched Vulnerability : CVE-2026-98909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: cpswnew: unregister devlink on port registration failure cpswprobe registers devlink before registering the CPSW ports. If cpswregisterports fails, the err...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146288 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146253)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146253 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltechprocessrelpacket Make finger2 and also...

Linux Distros Unpatched Vulnerability : CVE-2026-116620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library...

TencentOS Server 3: perl-DBI (TSSA-2026:1201)

"The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1201 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Rocky Linux 9.6 [CIQ] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (ciqsa-2026_1721)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261721 advisory. This advisory aggregates security fixes for the libevent SRPM in CIQ LTS 9.6. It addresses 2 CVEs: CVE-2026-63379, CVE-2026-63381. Tenable has extracted...

Debian dla-4845 : ca-certificates - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4845 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4845-1 [email protected] https://www.debian.org/lts/security/...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146269 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing...

Linux Distros Unpatched Vulnerability : CVE-2026-79978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RTIO streaming completion callback adxl345processfifosamplescb in drivers/sensor/adi/adxl345/adxl345stream.c clamps the amount of FIFO data it will report...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146266 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvecrxcompleted In nvecrxcompleted, when an incomplete RX...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146327)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146327 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x,...

Hitachi Energy RTU500 Missing Authorization (CVE-2026-8067)

An improper authorization vulnerability in the RTU500's web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation. According to Hitachi Energ...

Linux Distros Unpatched Vulnerability : CVE-2026-98899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't...

Linux Distros Unpatched Vulnerability : CVE-2026-98961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: unlock inode and extent in caller when iouring read extent fails btrfsuringreadextent runs only after btrfsencodedread has taken the inode shared lock an...

AlmaLinux 8 : emacs (ALSA-2026:90800)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:90800 advisory. emacs: Emacs: arbitrary code execution in Flymake mode CVE-2026-96442 Tenable has extracted the preceding description block directly from the AlmaLinux security...

Linux Distros Unpatched Vulnerability : CVE-2026-116741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Speex libspeex through 1.2.1 contains an out-of-bounds write vulnerability in speexbitsreadwholebytes in libspeex/bits.c that mishandles length truncation for...

Linux Distros Unpatched Vulnerability : CVE-2026-65625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits...

Linux Distros Unpatched Vulnerability : CVE-2026-98953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - devlink: fix devlinkrel reference leak when notify work is pending devlinkrelnestedinnotifyworkschedule takes a reference on the devlinkrel for the notify work...

Linux Distros Unpatched Vulnerability : CVE-2026-98912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: oss: Reject reads that cannot fit the next event sndseqossread checks whether the next queued OSS sequencer event fits in the remaining userspace...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146118 advisory. PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after bei...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146315 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITEONCE when changing lower socket callbacks kcmattach replaces a live lower TCP...

PLANET WGS-804HPT and WGS-4215 OS Command Injection (CVE-2025-46272)

PLANET WGS-804HPT V2 and WGS-4215-8P2S are vulnerable to a command injection attack that could allow an unauthenticated attacker to execute OS commands on the host system. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146273)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146273 advisory. In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146290)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146290 advisory. In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags overflow by bounding framecount tbnetpoll assembles a multi-frame...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146119 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...

TencentOS Server 4: kernel (TSSA-2026:1226)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1226 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-101722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are MySQL...

SUSE SLED15 / SLES15 Security Update : cosign (SUSE-SU-2026:4903-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4903-1 advisory. This update for cosign rebuilds it against the current go security release. Tenable has extracted the preceding...

Oracle Linux 8 : libreswan (ELSA-2026-90492)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-90492 advisory. - Backport fixes for CVE-2026-94453, CVE-2026-77206 and CVE-2026-77207 RHEL-281879, RHEL-282682, RHEL-282477 - Backport fix for CVE-2026-14957...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146324 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix authchunklist capacity check in sctpauthepaddchunkid sctpauthepaddchunkid uses...

Linux Distros Unpatched Vulnerability : CVE-2026-99020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: tps6594-regulator: Fix nlinearranges for TPS65224 BUCK2-4 The TPS65224 BUCK2, BUCK3 and BUCK4 descriptors pass 4 as nlinearranges, but...