EulerOS 2.0 SP12 : rsyslog (EulerOS-SA-2026-4529)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

RHEL 8 : kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_161_1 (RHSA-2026:95601)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95601 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

Slackware Linux 15.0 / current openssh Vulnerability (SSA:2026-309-01)

The version of openssh installed on the remote host is prior to 10.6p2. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-309-01 advisory. New openssh packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...

EulerOS 2.0 SP12 : python3 (EulerOS-SA-2026-4527)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Oracle Solaris Third Party Bulletin announces patches for one or more security vulnerabilities addressed in third party software that is...

EulerOS 2.0 SP12 : pcre2 (EulerOS-SA-2026-4512)

According to the versions of the pcre2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject.CVE-2026-89160 PCRE2 befo...

Linux Distros Unpatched Vulnerability : CVE-2026-92695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parsepacket callback in src/pcapplugin/pcapcollector.cpp is...

AlmaLinux 10 : cockpit-files (ALSA-2026:95570)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:95570 advisory. cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition CVE-2026-91203 cockpit-files: cockpit-file...

RockyLinux 9 : nodejs:18 (RLSA-2023:4330)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4330 advisory. nodejs: mainModule.proto bypass experimental policy mechanism CVE-2023-30581 nodejs: process interuption due to invalid Public Key information in x509...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150620)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150620 advisory. Unity Link Advisory UTSA-2026-150620 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

AlmaLinux 9.6 [TuxCare] Security Update: libpcap / libpcap-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793973527)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793973527 advisory. - libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In...

Linux Distros Unpatched Vulnerability : CVE-2026-73473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer gst-plugins-good avidemux. In the subindex parser, missing validation of the entry count can cause excessive memory allocation and...

OpenSSH < 10.6p2 Authentication Bypass

The version of OpenSSH installed on the remote host is prior to 10.6p2. It is, therefore, affected by an authentication bypass vulnerability as referenced in the release-10.6p2 advisory. - sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a passwor...

Cisco UCS Central Software RCE (cisco-sa-cucs-rce-LzHSFRDQ)

According to its self-reported version, Cisco Unified Computing System Central Software is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct...

EulerOS 2.0 SP12 : kbd (EulerOS-SA-2026-4410)

According to the versions of the kbd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented...

JetBrains IntelliJ IDEA < 2026.2.4 Certificate Validation (CVE-2026-118697)

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.2.4. It is, therefore, affected by a vulnerability: - In JetBrains IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates. CVE-2026-118697 Note that Nessus h...

Linux Distros Unpatched Vulnerability : CVE-2026-123273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c...

Linux Distros Unpatched Vulnerability : CVE-2026-100252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Authorization vulnerability in Apache ZooKeeper. When SASL authentication is enabled on the client port, the server's SASL callback handler grants ever...

Linux Distros Unpatched Vulnerability : CVE-2026-120421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabled...

RHEL 8 / 9 : Satellite 6.16 EUS (RHSA-2026:95655)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95655 advisory. This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address the vulnerabilities describe...

EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-4402)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c,...

EulerOS 2.0 SP12 : python-setuptools (EulerOS-SA-2026-4526)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileLis...

AlmaLinux 9.6 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools (ALMALINUX9.6:CLSA-2026:1793972443)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793972443 advisory. - Use-after-free in sequential reader when pngreadend called without reading image rows fedora-all CVE-2026-46675 Note that Nessus has not...

EulerOS 2.0 SP12 : nss (EulerOS-SA-2026-4504)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird...

Fedora 43 : perl-HTTP-Headers-ActionPack (2026-5ca1419368)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5ca1419368 advisory. HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. Version 0.10 uses...

Fedora 43 : hatch (2026-2ef243ce94)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2ef243ce94 advisory. Backport updated Python distributions from Hatch 1.18.2 The latest managed CPython interpreters for Python 3.11 and later should now distrust the compromised...

AlmaLinux 9.2 [TuxCare] Security Update: gnome-remote-desktop (ALMALINUX9.2:CLSA-2026:1794007006)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1794007006 advisory. - A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results...

EulerOS 2.0 SP12 : ruby (EulerOS-SA-2026-4530)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : REJECTED Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security...

EulerOS 2.0 SP12 : p11-kit (EulerOS-SA-2026-4432)

According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow...

EulerOS 2.0 SP12 : bind (EulerOS-SA-2026-4468)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The BIND resolver accepts validly-signed NSEC records where the 'Next Domain Name' field points outside the signer's zone. This issue affects BIND 9...

EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2026-4417)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. Wh...

Linux Distros Unpatched Vulnerability : CVE-2026-93424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peerfindtemplate in src/netflowplugin/netflowcollector.cpp and...

Fedora 43 : proftpd (2026-d2e76a72c7)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d2e76a72c7 advisory. Current upstream release with multiple security fixes. See changelog for details. Tenable has extracted the preceding description block directly fro...

Linux Distros Unpatched Vulnerability : CVE-2026-112938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, On POSIX platforms, StrictSoftFileLock and AsyncStrictSoftFileLock validate th...

AlmaLinux 9.2 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs (ALMALINUX9.2:CLSA-2026:1794009779)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1794009779 advisory. - A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not veri...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150621 advisory. Unity Link Advisory UTSA-2026-150621 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

FreeBSD : OpenEXR -- 3.4.17 fixes multiple vulnerabilities (1faea94f-d8fc-11f1-9968-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1faea94f-d8fc-11f1-9968-3c7c3fba4204 advisory. Cary Phillips reports: This version also addresses a regression introduced in v3.4.14 in reading deep...

EulerOS 2.0 SP12 : python-lxml (EulerOS-SA-2026-4521)

According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missin...

Fedora 44 : proftpd (2026-e68a51a81c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e68a51a81c advisory. Current upstream release with multiple security fixes. See changelog for details. Tenable has extracted the preceding description block directly fro...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150618 advisory. Unity Link Advisory UTSA-2026-150618 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-123962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorizedkeys file to be a symlink...

SUSE SLES12: rsyslog / rsyslog-diag-tools / rsyslog-doc / rsyslog-module-gssapi / etc (SUSE-SU-2026:5089-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5089-1 advisory. - CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path...

MiracleLinux 8 : bind9.16-9.16.23-0.22.el8_10.21 (AXSA:2026-2279:06)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2279:06 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 bind: BIND: Denial of Service via unbounded processing of crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-121949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes, allowing values that point to hosts or schemes...

Linux Distros Unpatched Vulnerability : CVE-2026-92693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp...

EulerOS 2.0 SP12 : util-linux (EulerOS-SA-2026-4538)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount....

SUSE SLES12 Security Update : kernel (Live Patch 87 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:5088-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5088-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.328 fixes various security issues: The following security issues were fixed: -...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-4488)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : vt: stabilize tty reference in kbdkeycode with ttyportttygetCVE-2026-74675 udp: fix potential use-after-free in tunnel segmentationCVE-2026-74705...

SUSE SLED15 / SLES15 Security Update : parted (SUSE-SU-2026:5117-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5117-1 advisory. - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image bsc1286017. - CVE-2026-89088:...

RHEL 9 : tesseract (RHSA-2026:95086)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95086 advisory. A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNL...

Rocky Linux 8.6 [CIQ] Security Update: PackageKit / PackageKit-command-not-found / PackageKit-cron / etc Multiple Vulnerabilities (ciqsa-2026_1761)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261761 advisory. This advisory aggregates security fixes for the PackageKit SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2026-41651, CVE-2018-1106. Tenable has extracted...