Linux Distros Unpatched Vulnerability : CVE-2026-92695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parsepacket callback in src/pcapplugin/pcapcollector.cpp is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150626 advisory. Unity Link Advisory UTSA-2026-150626 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

RockyLinux 9 : tesseract (RLSA-2026:95086)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95086 advisory. tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data CVE-2026-88048 tesseract: Tesseract: Stack buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-107479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framework. An application...

Linux Distros Unpatched Vulnerability : CVE-2026-112908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From version 3.30.0 until version 4.2.1, StrictSoftFileLock and AsyncStrictSoftFileLock on POSIX system...

AlmaLinux 9.2 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.2:CLSA-2026:1793969690)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793969690 advisory. - libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XMLParserReset zeroes the direct byte count but never offse...

Linux Distros Unpatched Vulnerability : CVE-2026-49272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require...

EulerOS 2.0 SP12 : pcre2 (EulerOS-SA-2026-4512)

According to the versions of the pcre2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject.CVE-2026-89160 PCRE2 befo...

RHEL 9 : osbuild-composer (RHSA-2026:95272)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95272 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for...

Oracle Linux 8 : tesseract (ELSA-2026-95725)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95725 advisory. - Fix incomplete CVE-2026-88051: reset 'sizeused' on validation failure in 'GenericVector::read'; check 'fontinfotable' and 'fontsettable' read return...

EulerOS 2.0 SP12 : mariadb-connector-c (EulerOS-SA-2026-4502)

According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validat...

EulerOS 2.0 SP12 : open-iscsi (EulerOS-SA-2026-4505)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow vulnerability exists in the idbmrecinfoconfig function in open-iscsi iscsi- initiator-utils. An attacker can craft a...

Apache ActiveMQ < 5.19.12 / 6.x < 6.3.3 Multiple Vulnerabilities

The version of Apache ActiveMQ running on the remote host is prior to 5.19.12, or 6.x prior to 6.3.3. It is, therefore, affected by multiple vulnerabilities: - Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime...

EulerOS 2.0 SP12 : unbound (EulerOS-SA-2026-4460)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC...

Rocky Linux 9.6 [TuxCare] Security Update: libXi / libXi-devel (ALMALINUX9.6:CLSA-2026:1793984702)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793984702 advisory. - A malicious X server could cause a heap overflow by injecting a large DEVICEENABLE reply when processed by libXi before 1.8.4...

Linux Distros Unpatched Vulnerability : CVE-2026-123269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdkdescriptorfilereadheader of the file...

Dnspython < 2.9.0 DoS

The version of dnspython installed on the remote host is prior to 2.9.0. It is, therefore, affected by a denial of service vulnerability: - dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit...

RHEL 10 : cockpit-files (RHSA-2026:95570)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:95570 advisory. A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via...

EulerOS 2.0 SP12 : perl-Storable (EulerOS-SA-2026-4515)

According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...

MiracleLinux 9 : dotnet8.0-8.0.133-1.el9_8.ML.1 (AXSA:2026-2268:23)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2268:23 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privile...

FreeBSD : Keycloak -- multiple vulnerabilities (06eeb817-d93d-11f1-908f-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 06eeb817-d93d-11f1-908f-3c7c3fba4204 advisory. The Keycloak Team reports: Tenable has extracted the preceding description block directly from...

JetBrains Rider < 2025.3.5.3 / 2026.1.x < 2026.1.5.3 / 2026.2.x < 2026.2.4 Certificate Validation

The version of JetBrains Rider installed on the remote host is prior to 2025.3.5.3, or is 2026.1.x prior to 2026.1.5.3, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability: - In JetBrains Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3...

EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4441)

According to the versions of the popt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host...

Fedora 45 : perl-Starman (2026-c02d051eaf)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c02d051eaf advisory. Starman 0.4019 fixes several CVEs: Stream chunked request bodies to the temporary buffer instead of holding whole chunks in memory CVE-2026-115824...

EulerOS 2.0 SP12 : kbd (EulerOS-SA-2026-4487)

According to the versions of the kbd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented...

EulerOS 2.0 SP12 : python-filelock (EulerOS-SA-2026-4520)

"According to the versions of the python-filelock package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition...

Linux Distros Unpatched Vulnerability : CVE-2026-123036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-core. When a task marked nolog: true fails, the task result is censored before being emitted, but the exception field is retained...

EulerOS 2.0 SP12 : coreutils (EulerOS-SA-2026-4395)

According to the versions of the coreutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large...

RockyLinux 9 : glibc (RLSA-2026:95618)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95618 advisory. glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-89092 glibc: glibc DNS stub resolver: Denial of Service via long search domain in...

Fedora 43 : tailscale (2026-0451d4f86a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0451d4f86a advisory. update to 1.102.5 ---- update to 1.98.10, fix several cves Tenable has extracted the preceding description block directly from the Fedora security...

Linux Distros Unpatched Vulnerability : CVE-2026-103582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ the .NET OpenWire client, package Apache.NMS.ActiveMQ before 2.3.0. The...

EulerOS 2.0 SP12 : open-isns (EulerOS-SA-2026-4506)

According to the versions of the open-isns packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through...

EulerOS 2.0 SP12 : python-paramiko (EulerOS-SA-2026-4445)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

RHEL 9 : thunderbird (RHSA-2026:95596)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:95596 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libexpat: denial of service via crafted XML input...

Linux Distros Unpatched Vulnerability : CVE-2026-100300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150632 advisory. Unity Link Advisory UTSA-2026-150632 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

RHEL 8 : ruby:2.5 (RHSA-2026:95512)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95512 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

AlmaLinux 9.2 [TuxCare] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793953225)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793953225 advisory. - A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that...

Fedora 44 : python-mistune (2026-ea39a303cf)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ea39a303cf advisory. Update to 3.3.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

RHEL 8 : rsyslog (RHSA-2026:95573)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95573 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists,...

Fedora 44 : rust-zstd / rust-zstd-safe / rust-zstd-safe7 / rust-zstd-sys / etc (2026-ab4ba75e47)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ab4ba75e47 advisory. - Update the zstd crate to version 0.14.3 and add a compat package for version 0.13. - Update the zstd-safe crate to version 8.2.0 and add a compat package f...

EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-4471)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794007406)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794007406 advisory. - libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2 in lib/xmlparse.c that...

EulerOS 2.0 SP12 : libkcapi (EulerOS-SA-2026-4415)

According to the versions of the libkcapi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter...

Fedora 44 : hatch (2026-01f9a44339)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-01f9a44339 advisory. Update to version 0.18.2. The latest managed CPython interpreters for Python 3.11 and later should now distrust the compromised eMudhra/emSign intermediate C...

JetBrains GoLand < 2025.3.5.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Certificate Validation

The version of JetBrains GoLand installed on the remote host is prior to 2025.3.5.2, or 2026.1.x prior to 2026.1.5.1, or 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability: - In JetBrains GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2, the...

Linux Distros Unpatched Vulnerability : CVE-2026-52848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, an unauthenticated user could use a crafted URL to sk...

Linux Distros Unpatched Vulnerability : CVE-2026-123037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the ansible-core user module. When generatesshkey is enabled, User.sshkeygen guards the key files against symlinks but checks the /.ssh...

EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-4394)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-4542)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An out-of-bounds read flaw was found in the X.Org X server and Xwayland in glXDispChangeDrawableAttributes. A wrong size validation check...