FreeBSD : Keycloak -- multiple vulnerabilities (2eb1927c-a57b-11f1-9b1f-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2eb1927c-a57b-11f1-9b1f-3c7c3fba4204 advisory. The Keycloak Team reports: Tenable has extracted the preceding description block directly from...

Palo Alto GlobalProtect App 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h13 / 6.3.x < 6.3.3-h14 Multiple Vulnerabilities (Global Un-Protect)

The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.0.x prior to 6.0.15, 6.2.x prior to 6.2.8-h13, or 6.3.x prior to 6.3.3-h14. It is, therefore, affected by multiple vulnerabilities collectively known as Global Un-Protect: - Local privilege escalation...

TencentOS Server 2: sssd (TSSA-2026:0944)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0944 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:61943)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61943 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...

PostgreSQL 17.x < 17.11 / 18.x < 18.6 GSSAPI Improper Message Integrity Enforcement

The version of PostgreSQL installed on the remote host is 17 prior to 17.11 or 18 prior to 18.6. As such, it is potentially affected by a security bypass vulnerability: - Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.con...

RockyLinux 8 : glib2 (RLSA-2026:61766)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61766 advisory. glib: buffer over-read in glib/gvariant-serialiser.c via gvstupleisnormal CVE-2026-58010 glib: out-of-bounds read in glib/gdatetime.c:gdatetimegetymd vi...

Alibaba Cloud Linux 3 : 0258: libarchive (ALINUX3-SA-2026:0258)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0258 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-14164: A double free issue has been...

MiracleLinux 8 : abrt-2.10.9-26.el8_10.ML.1 (AXSA:2026-1725:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1725:01 advisory. abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories CVE-2026-54228 abrt: ChownProblemDir succeeds...

TencentOS Server 4: vim (TSSA-2026:0871)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0871 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-11873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Apache-proxied Dogtag CA REST endpoint exposed by IdM POST /ca/rest/certrequests returns HTTP 500 with internal Java stack traces for unauthenticated malform...

TencentOS Server 4: nodejs20 (TSSA-2026:0949)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0949 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

JFrog Artifactory 7.146.x < 7.146.36 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.146.x prior to 7.146.36. It is, therefore, affected by multiple vulnerabilities: - A user who can read an existing remote VCS repository can replace its configured origin or supply an...

Linux Distros Unpatched Vulnerability : CVE-2026-53682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating...

TencentOS Server 2: python-pyasn1 (TSSA-2026:0941)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0941 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

RHEL 9 : postgresql (RHSA-2026:62116)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62116 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Denial of Service via...

openSUSE 16: postgresql16 / postgresql16-contrib / postgresql16-devel / etc (openSUSE-SU-2026:21701-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21701-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE...

openSUSE 16: gstreamer-devtools / gstreamer-devtools-devel / etc (openSUSE-SU-2026:21689-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21689-1 advisory. - CVE-2025-4574: crossbeam-channel: internal Channel type's Drop method has a race condition that can lead to a double-free and memory corruptio...

Debian dsa-6480 : keystone - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6480 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6480-1 [email protected] https://www.debian.org/securit...

Alibaba Cloud Linux 3 : 0264: freerdp (ALINUX3-SA-2026:0264)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0264 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-64624: FreeRDP before 3.28.0 trea...

Linux Distros Unpatched Vulnerability : CVE-2026-80213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its...

TencentOS Server 3: ruby:3.3 (TSSA-2026:0933)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0933 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

openSUSE 16 Security Update : librest (openSUSE-SU-2026:21694-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21694-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseud...

MiracleLinux 8 : attr-2.6.0-1.el8 (AXSA:2026-1710:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1710:02 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the...

AlmaLinux 9 : nginx:1.26 (ALSA-2026:59496)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59496 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service ...

RockyLinux 9 : xmlrpc-c (RLSA-2026:61316)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:61316 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-83610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...

Fedora 46 : freerdp2 (2026-1c0deda1e7)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1c0deda1e7 advisory. Automatic update for freerdp2-2.11.7-16.fc46. Changelog Mon Aug 31 2026 Ondrej Holy - 2.11.7-16 - Backport several CVE fixes CVE-2026-22852,...

Linux Distros Unpatched Vulnerability : CVE-2024-58379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nodemailer before 6.9.9 contains a regular expression denial of service vulnerability in email parsing when attachDataUrls parameter is set or processing embedd...

RHCOS 4 : Red Hat build of MicroShift 4.21.31 (RHSA-2026:60668)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60668 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame CVE-2026-33814 No...

TencentOS Server 2: freeipmi (TSSA-2026:0936)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0936 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

AlmaLinux 9 : dbus-broker (ALSA-2026:61355)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:61355 advisory. dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup CVE-2026-16730 Tenable has extracted the preceding description block directly...

MiracleLinux 9 : php-8.0.30-8.el9_8 (AXSA:2026-1720:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1720:03 advisory. php: ext/openssl: memory corruption in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 php: ext-pgsql: PHP: SQL injection via improper backslash...

AlmaLinux 9 : php (ALSA-2026:61259)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61259 advisory. php: ext/openssl: memory corruption in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 php: ext-pgsql: PHP: SQL injection via improper backslash escaping...

AlmaLinux 9 : php:8.2 (ALSA-2026:61903)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61903 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archive...

RockyLinux 9 : dbus-broker (RLSA-2026:61355)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:61355 advisory. dbus-broker: dbus-broker: session bus denial of service via EMFILE during peer setup CVE-2026-16730 Tenable has extracted the preceding description block directl...

MiracleLinux 9 : libxml2-2.9.13-14.el9_8.4 (AXSA:2026-1716:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1716:08 advisory. libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free CVE-2026-6653 libxml2: libxml2: Arbitrary code...

RockyLinux 9 : freerdp (RLSA-2026:61379)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61379 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafted...

RHEL 9 : sqlite (RHSA-2026:62236)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62236 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a sing...

Linux Distros Unpatched Vulnerability : CVE-2026-82398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function...

Oracle Linux 8 : ELSA-2026-61242-0: / mingw-sqlite (ELSA-2026-612420)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-612420 advisory. 3.26.0.0-3 - Fix CVE-2026-11822 CVE-2026-11824 Resolves: RHEL-218233 Tenable has extracted the preceding description block directly from the Oracle Linux...

TencentOS Server 4: perl-DBI (TSSA-2026:0945)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0945 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: systemd (TSSA-2026:0870)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0870 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

openSUSE 16: postgresql17 / postgresql17-contrib / postgresql17-devel / etc (openSUSE-SU-2026:21702-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21702-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE...

Alibaba Cloud Linux 3 : 0265: bind (ALINUX3-SA-2026:0265)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0265 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-10723: BIND may accept incorrect...

Alibaba Cloud Linux 3 : 0272: unbound (ALINUX3-SA-2026:0272)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0272 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-44690: In NLnet Labs Unbound 1.7.0 up to a...

RHCOS 4 : OpenShift Container Platform 4.21.31 (RHSA-2026:60449)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60449 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...

MiracleLinux 8 : iperf3-3.5-12.el8_10.1 (AXSA:2026-1717:05)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1717:05 advisory. iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion CVE-2026-71217 Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-83615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...

openSUSE 16 Security Update : python-aiohttp (openSUSE-SU-2026:21687-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21687-1 advisory. - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate...

RHEL 10 : rest (RHSA-2026:62222)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62222 advisory. The rest packages provide a library for access to the RESTful web services. Security Fixes: librest: weak random number generation in PKCE...