Linux Distros Unpatched Vulnerability : CVE-2026-74277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path In iommudmamapsg, when handling PCI P2PDMA cases, the DMA length of the current...

Linux Distros Unpatched Vulnerability : CVE-2026-68466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout lpc32xxxmitdma waits for the DMA completion callback but ignores waitforcompletiontimeout. A...

Linux Distros Unpatched Vulnerability : CVE-2026-72186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap i...

Linux Distros Unpatched Vulnerability : CVE-2026-72374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each...

Linux Distros Unpatched Vulnerability : CVE-2026-72184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfsnonresidentattrinsertrange...

Zoom Workplace < 7.1.0 Vulnerability (ZSB-26015)

The version of Zoom Workplace installed on the remote host is prior to 7.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26015 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to...

RockyLinux 10 : unbound (RLSA-2026:55892)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55892 advisory. unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 unbound: Unbound: Denial of Servic...

Linux Distros Unpatched Vulnerability : CVE-2026-72502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: ipv6: clamp default adverting MSS to avoid GSOBYFRAGS 0xFFFF When MTU is large, ip6defaultadvmss can return IPV6MAXPLEN 65535. This is interpreted by TCP a...

Linux Distros Unpatched Vulnerability : CVE-2026-72164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2IOCMOVEEXT operations, userspace supplies a physical megoal. ocfs2moveextent initializes...

Fedora 43 : linux-firmware (2026-e82e06fcae)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e82e06fcae advisory. Update to 20260810: amdgpu: numerous firmware updates update firmware for MT7922 WiFi device morsemicro: add firmware for mm8108 support ath10k: WCN3990 hw1....

Linux Distros Unpatched Vulnerability : CVE-2026-72143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control...

Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-017 (ALASGIMP-2026-017)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-017 advisory. A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by...

Linux Distros Unpatched Vulnerability : CVE-2026-68461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software nod...

Linux Distros Unpatched Vulnerability : CVE-2026-72431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alloctag: fix use-after-free in /proc/allocinfo after module unload allocinfostart only reinitializes the codetag iterator at position 0. For subsequent reads...

Linux Distros Unpatched Vulnerability : CVE-2026-68478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memstick: msblock: reject a card that reports too many blocks msbftlinitialize computes the zone count from the card block count with no bound: msb-zonecount =...

RHEL 9 : kpatch-patch-5_14_0-687_10_1 (RHSA-2026:55763)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:55763 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

Linux Distros Unpatched Vulnerability : CVE-2026-72422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free of conn-preauthinfo in concurrent SMB2 NEGOTIATE conn-preauthinfo is shared connection state struct preauthintegrityinfo, kmalloc-96...

Amazon Linux 2 : rust, --advisory ALAS2-2026-3865 (ALAS-2026-3865)

The version of rust installed on the remote host is prior to 1.97.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3865 advisory. RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time...

Linux Distros Unpatched Vulnerability : CVE-2026-72055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ip6vti: require CAPNETADMIN in the device netns for changelink vti6changelink operates on at most two netns, devnetdev and the tunnel link netns t-net. The...

Linux Distros Unpatched Vulnerability : CVE-2026-72458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix NULL pointer dereference in unpackpdb pdb-dfa could be NULL if unpackdfa fails, causing a NULL pointer dereference. CVE-2026-72458 Note that Nessu...

AlmaLinux 10 : libssh (ALSA-2026:55855)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55855 advisory. libssh: libssh: information disclosure via short GSSAPI Curve25519 public key CVE-2026-59842 libssh: libssh: denial of service via zero advertised chann...

Linux Distros Unpatched Vulnerability : CVE-2026-72273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: efifb: fix memory leak in efifbprobe Since commit 73ce73c30ba9 fbdev: Transfer video= option strings to caller; clarify ownership the string returned fro...

VMware ESX 8.0 / 9.0 / 9.1 Out-of-Bounds Read (VMSA-2026-0006)

The version of VMware ESX installed on the remote host is 8.0 prior to build 25205845 8.0 Update 3i, or 9.0 prior to build 25595025 9.0.2.0100, or 9.1 prior to build 25370933 9.1.0.0. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX,...

Linux Distros Unpatched Vulnerability : CVE-2026-72141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine...

Linux Distros Unpatched Vulnerability : CVE-2026-75000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper HTML/CSS sanitization of the SVG animate by attribute may lead to remote image blocking...

RHEL 8 : kernel (RHSA-2026:55764)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55764 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm/slub: avoid accessing...

VMware ESX 8.0 / 9.0 / 9.1 Out-of-Bounds Write (VMSA-2026-0006)

The version of VMware ESX installed on the remote host is 8.0 prior to build 25595708 8.0 Update 3k, or 9.0 prior to build 25595025 9.0.2.0100, or 9.1 prior to build 25557999 9.1.0.0200. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX...

Linux Distros Unpatched Vulnerability : CVE-2026-72229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: clean untagged VLAN on netdev registration failure When an mesh interface is registered, it creates an untagged struct batadvmeshifvlan on top of it...

Linux Distros Unpatched Vulnerability : CVE-2026-72120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: add missing rcu list annotations and operations sashiko-bot remarked the missing use of listaddrcu in bcmrx|txsetup to have a proper initialized bcmop...

Oracle Linux 8 : haproxy (ELSA-2026-55859)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-55859 advisory. 1.8.27-5.2 - Fix NULL pointer dereference in hpackdhtinsert CVE-2026-55204, RHEL-211083 Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : unbound (ELSA-2026-55841)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55841 advisory. 1.24.2-3.4 - Fix CVE-2026-55973 RHEL-212809 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101967 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a...

Linux Distros Unpatched Vulnerability : CVE-2026-72212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/memoryhotplug: fix incorrect altmap passing in error path In createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemm...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101980 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc...

Linux Distros Unpatched Vulnerability : CVE-2026-72433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftmetabridge: fix NFTMETABRIIIFPVID stack leak This needs to test for nonzero retval. CVE-2026-72433 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-72424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313rtcprobe calls devmrequestirq with IRQFSHARED and &pdev-dev as the cookie, but platformsetdrvda...

Mozilla Firefox ESR < 115.39

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.39. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-75 advisory. - Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox...

Linux Distros Unpatched Vulnerability : CVE-2026-74287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: validate embedded address parameter length sctpverifyasconf and sctpverifyparam only validate ADDIP, DELIP, and SETPRIMARY parameters against a fixed...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101978)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101978 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...

Linux Distros Unpatched Vulnerability : CVE-2026-72348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matches check that the fixed extension header is present, then use th...

Linux Distros Unpatched Vulnerability : CVE-2026-72196

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: bound copylcns dp-pagelcns index in analysis pass In logreplay's analysis pass, after finddp returns a valid DIRPAGEENTRY for the targetattr, targetv...

Linux Distros Unpatched Vulnerability : CVE-2026-72295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip...

Linux Distros Unpatched Vulnerability : CVE-2026-72056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ena: clean up XDP TX queues when regular TX setup fails createqueueswithsizebackoff creates XDP TX queues before setting up the regular TX path. If the...

Linux Distros Unpatched Vulnerability : CVE-2026-72209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfsattrfind and ntfsexternalattrfind check that...

Linux Distros Unpatched Vulnerability : CVE-2026-68519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, GlancesActions.run in glances/actions.py ignores --disable-config-exec for...

Linux Distros Unpatched Vulnerability : CVE-2026-62886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-74376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid10: reset readslot when reusing r10bio for discard putallbios always drops devsi.bio, but it only drops devsi.replbio when r10bio-readslot 0. If discard...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0837

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0837. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102008)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102008 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accept...

Linux Distros Unpatched Vulnerability : CVE-2026-74422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/rockchip: inno-hdmi: Switch to drmmkzalloc Driver makes use of drmmencoderinit to initialize the encoder and automatically handle the cleanup by registering...