Zoom Workplace VDI Client < 7.0.10 Vulnerability (ZSB-26014)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-26014 advisory. - Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for...

Adobe Audition < 25.6.6 / 26.0 < 26.3 Multiple Vulnerabilities (APSB26-71) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 25.6.6, 26.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-71 advisory. - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i...

Fortinet Fortigate Header injection in Web Filter warning page (FG-IR-26-152)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-152 advisory. - An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' vulnerability CWE-113 vulnerability ...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-59890)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-59890 advisory. - setuptools is a package that allows users to download, build, install, upgrade, and uninstall...

Linux Distros Unpatched Vulnerability : CVE-2026-54706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6.4...

RHEL 8 : kernel update (Important) (RHSA-2026:39083)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39083 advisory. Please update Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory. Note that...

RockyLinux 9 : kernel (RLSA-2026:38491)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38491 advisory. kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling CVE-2026-22979 kernel: rtmutex: Use waiter::task instead of current...

RHEL 8 : kernel-rt update (Important) (RHSA-2026:39082)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39082 advisory. Please update Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory. Note that...

AlmaLinux 8 : kernel update (High) (ALSA-2026:39083)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:39083 advisory. Please update Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that Nessus has not tested for...

Mozilla Firefox < 152.0.6

The version of Firefox installed on the remote Windows host is prior to 152.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-67 advisory. - We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this...

RHEL 10 : git-lfs (RHSA-2026:39272)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:39272 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing...

RHEL 9 : git-lfs (RHSA-2026:39319)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:39319 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing t...

Fedora 43 : golang-github-openprinting-ipp-usb (2026-d7dfd8e9ba)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d7dfd8e9ba advisory. 0.9.34 - security fixes for CVE-2026-27145 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

EulerOS 2.0 SP10 : ruby (EulerOS-SA-2026-2711)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guard in...

EulerOS 2.0 SP10 : docker-engine (EulerOS-SA-2026-2646)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to...

openSUSE 16 Security Update : gh (openSUSE-SU-2026:21310-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21310-1 advisory. Changes in gh: - Update to version 2.96.0: Critical security fix: patched vulnerability in gh codespace jupyter that could allow command executi...

Security Updates for Microsoft Excel Products (July 2026)

The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. CVE-2026-55054 - Heap-based buffer overflow in Microsoft...

EulerOS 2.0 SP10 : lcms2 (EulerOS-SA-2026-2655)

According to the versions of the lcms2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

openSUSE 16 Security Update : tiff (openSUSE-SU-2026:21289-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21289-1 advisory. This update for tiff fixes the following issues - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2026:2853-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2853-1 advisory. Update to version 4.7.2. Security issues fixed: - CVE-2026-12912: heap-based buffer overflow when processing...

RockyLinux 8 : xorg-x11-server (RLSA-2026:38487)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38487 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the RockyLin...

RockyLinux 8 : xorg-x11-server-Xwayland (RLSA-2026:38488)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38488 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the RockyLin...

Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2026-38488)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-38488 advisory. 21.1.3-20.3 - CVE fix for: CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191516 Tenable has extracted the preceding description block...

AlmaLinux 9 : xorg-x11-server (ALSA-2026:38486)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38486 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the AlmaLinux...

openSUSE 16 Security Update : yelp (openSUSE-SU-2026:21295-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21295-1 advisory. This update for yelp fixes the following issue - CVE-2026-13601: overly permissive Content Security Policy allows host file disclosure via Flatpak...

CentOS 9 : sssd-2.9.9-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the sssd-2.9.9-3.el9 build changelog. - sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation CVE-2026-14474 - path...

openSUSE 16: libipa_hbac-devel / libipa_hbac0 / libnfsidmap-sss / etc (openSUSE-SU-2026:21290-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21290-1 advisory. This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by...

openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21291-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21291-1 advisory. This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read...

EulerOS 2.0 SP10 : libsoup (EulerOS-SA-2026-2658)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-50722)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-50722 advisory. - Libreswan, via the function RSAauthenticatehashsignaturepkcs115rsa, did not correctly verify t...

SUSE SLES15 Security Update : kernel RT (Live Patch 11 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:2855-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2855-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.37 fixes various security issues The following security issues were fixed: -...

MiracleLinux 8 : libreoffice-6.4.7.2-21.el8_10.ML.1 (AXSA:2026-1254:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1254:02 advisory. libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVE-2026-8357 Tenable has extracted the preceding...

EulerOS 2.0 SP10 : python-pyasn1 (EulerOS-SA-2026-2668)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from...

EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2026-2719)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map...

RHEL 8 : python-pillow (RHSA-2026:39127)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39127 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

SUSE SLED15 / SLES15 Security Update : python-urllib3 (SUSE-SU-2026:2854-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2854-1 advisory. This update for python-urllib3 fixes the following issue - egression introduced by CVE-2025-66471 fix during file...

EulerOS 2.0 SP10 : openssh (EulerOS-SA-2026-2705)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.CVE-2026-35388 In OpenSSH before 10.3, comman...

SUSE SLES15 Security Update : kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:2858-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2858-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.31 fixes various security issues The following security issues were fixed: -...

RockyLinux 9 : buildah (RLSA-2026:38493)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38493 advisory. os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-39822 Tenable has extracted the preceding description block directly...

Oracle Linux 8 : kernel (ELSA-2026-33743)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33743 advisory. - fs/smb/client: fix out-of-bounds read in cifssanitizeprepath CKI Backport Bot RHEL-189506 CVE-2026-43112 - Enable workaround for ARM64 ERRATUM 41184...

EulerOS 2.0 SP10 : mesa (EulerOS-SA-2026-2662)

According to the versions of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an...

EulerOS 2.0 SP10 : shim (EulerOS-SA-2026-2671)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CR...

Adobe Premiere Pro < 25.6.6 / 26.0.0 < 26.3.0 Multiple Vulnerabilities (APSB26-76) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-76 advisory. - Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code...

RHEL 8 : thunderbird (RHSA-2026:39142)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:39142 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Sandbox escape in the DOM: Workers...

EulerOS 2.0 SP10 : libtheora (EulerOS-SA-2026-2701)

According to the versions of the libtheora packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI Audio Video Interleave parser, specifical...

KB5099538: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2026)

The remote Windows host is missing security update 5099538. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

KB5099444: Windows Server 2012 R2 Security Update (July 2026)

The remote Windows host is missing security update 5099444. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows Message Queuing...

KB5099535: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2026)

The remote Windows host is missing security update 5099535. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

MiracleLinux 9 : nginx:1.26 (AXSA:2026-1252:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1252:01 advisory. nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 Tenable has extracted the preceding description block directly from the MiracleLinux...

Fedora 44 : prometheus (2026-e07fd81708)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e07fd81708 advisory. Update to 3.13.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...