SUSE SLES15 Security Update : kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:2866-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2866-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.95 fixes various security issues The following security issues were fixed: -...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2026-2691)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust...

EulerOS 2.0 SP10 : httpd (EulerOS-SA-2026-2693)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects Apache...

Apache Tomcat 10.1.0.M1 < 10.1.57 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.57. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.57security-10 advisory. - Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to...

AlmaLinux 8 : python-pillow (ALSA-2026:39127)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:39127 advisory. python-pillow: Pillow: Denial of Service via crafted BDF font file CVE-2026-55379 python-pillow: Pillow: Denial of Service via crafted GD 2.x image file...

Security Updates for Microsoft SQL Server (July 2026)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over...

Linux Distros Unpatched Vulnerability : CVE-2026-58101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3EXTd2iext returns NULL when an extension's DER...

EulerOS 2.0 SP10 : glibc (EulerOS-SA-2026-2649)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_60-default / etc (SUSE-SU-2026:2902-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2902-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: -...

Adobe Experience Manager 6.5.0 < 6.5.2 Multiple Vulnerabilities (APSB26-56)

The version of Adobe Experience Manager installed on the remote host is prior to 6.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-56 advisory. - Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by an Improper Redirect Ope...

Adobe After Effects < 25.6.6 / 26.0.0 < 26.3.0 Multiple Arbitrary code execution (APSB26-78)

The version of Adobe After Effects installed on the remote Windows host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-78 advisory. - After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary co...

SUSE SLES15 Security Update : kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:2888-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2888-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.209 fixes various security issues The following security issues were fixed: ...

EulerOS 2.0 SP10 : libpng (EulerOS-SA-2026-2698)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-2642)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mrp: introduce active flags to prevent UAF when applicant uninitCVE-2022-50697 net: skbuff: propagate shared-frag marker through frag-transfer...

EulerOS 2.0 SP10 : systemd (EulerOS-SA-2026-2673)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the...

Adobe Illustrator < 29.8.9 / 30.0 < 30.6 Multiple Vulnerabilities (APSB26-79)

The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.9, 30.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-79 advisory. - Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary co...

AlmaLinux 9 : buildah (ALSA-2026:38493)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38493 advisory. os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-39822 Tenable has extracted the preceding description block directly...

Fortinet Fortigate Path traversal in CLI command allows deletion of root file system (FG-IR-26-151)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-151 advisory. - A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiOS 7.6.0...

Linux Distros Unpatched Vulnerability : CVE-2026-61626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - GHSA-5gf7-wjfm-vmvm: Out-of-bounds bit clears for negative Matroska ReadOrder values CVE-2026-61626 Note that Nessus relies on the presence of th...

Adobe Media Encoder < 25.6.6 / 26.0.0 < 26.3.0 Multiple Vulnerabilities (APSB26-72)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-72 advisory. - Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary co...

Adobe Bridge 15.1.5 < 15.1.6 / 16.x < 16.0.4 Multiple Vulnerabilities (APSB26-81)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 15.1.6 or 16.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-81 advisory. - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...

RockyLinux 8 : openssl (RLSA-2026:38503)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38503 advisory. openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing CVE-2026-28390 Tenable has extracted the preceding descriptio...

SUSE SLES12 Security Update : kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:2909-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2909-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: -...

Fortinet Fortigate Buffer overread in authd and wad daemon (FG-IR-26-154)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-154 advisory. - A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2...

openSUSE 16: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (openSUSE-SU-2026:21282-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21282-1 advisory. This update for GraphicsMagick fixes the following issue - CVE-2026-13606: crafted Photo CD PCD file can cause memory corruption bsc1269891. Tenable has...

EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2026-2645)

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root...

EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2026-2685)

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root...

RHEL 8 : kernel (RHSA-2026:39179)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39179 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: use a stable FDB...

SUSE SLES15 Security Update : kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:2862-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2862-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues The following security issues were fixed: -...

EulerOS 2.0 SP10 : openssl (EulerOS-SA-2026-2706)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA...

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2026-2682)

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BusyBox wget thru 1.3.7 accepted raw CR 0x0D/LF 0x0A and other C0 control bytes in the HTTP request- target path/query, allowing the request line...

Apache Tomcat 11.0.0.M1 < 11.0.24 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 11.0.24. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.24security-11 advisory. - Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to...

AlmaLinux 10 : buildah (ALSA-2026:38494)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38494 advisory. os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-39822 Tenable has extracted the preceding description block directly...

Zoom Workplace VDI Client < 6.5.17 Vulnerability (ZSB-26012)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.5.17. It is, therefore, affected by a vulnerability as referenced in the ZSB-26012 advisory. - A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom...

Adobe Audition < 25.6.6 / 26.0 < 26.3 Multiple Vulnerabilities (APSB26-71)

The version of Adobe Audition installed on the remote Windows host is prior to 25.6.6, 26.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-71 advisory. - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution...

KB5099539: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (July 2026)

The remote Windows host is missing security update 5099539. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

KB5101650: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (July 2026)

The remote Windows host is missing security update 5101650. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

Security Updates for Microsoft Office Online Server (July 2026)

The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-47642,...

Security Update for Microsoft .NET Core (July 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over ...

EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2026-2667)

According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...

EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2026-2708)

According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...

EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2026-2716)

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : barebox is a bootloader. In barebox from version 2016.03.0 to before version 2026.03.1 and the corresponding backport to 2025.09.3, an attack...

Microsoft Windows Subsystem for Linux (WSL2) < 2.7.10 Tampering (CVE-2026-57973) (July 2026)

The version of Microsoft Windows Subsystem for Linux WSL2 on the remote Windows host is prior to 2.7.10. It is, therefore, affected by a tampering vulnerability: - Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering...

SUSE SLES15 Security Update : python-Pillow (SUSE-SU-2026:2875-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2875-1 advisory. This update for python-Pillow fixes the following issues - CVE-2026-54059: crafted PCF font data can cause excessive memory allocation...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : PipeWire vulnerabilities (USN-8535-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8535-1 advisory. It was discovered that PipeWire accepted unbounded Content-Length values in its RAOP module. A remote attacker could possibly use...

Adobe Premiere Pro < 25.6.6 / 26.0.0 < 26.3.0 Multiple Vulnerabilities (APSB26-76)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-76 advisory. - Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-2695)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: skbuff: propagate shared-frag marker through frag-transfer helpersCVE-2026-43503 mailbox: Prevent out-of-bounds access in...

EulerOS 2.0 SP10 : perl (EulerOS-SA-2026-2707)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds...

SUSE SLES15 Security Update : kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:2863-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2863-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues The following security issues were fixed: -...

EulerOS 2.0 SP10 : cups (EulerOS-SA-2026-2683)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a...