EulerOS 2.0 SP12 : perl-XML-LibXML (EulerOS-SA-2026-4517)

According to the versions of the perl-XML-LibXML package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

Apache ZooKeeper 3.8.x < 3.8.8 / 3.9.x < 3.9.7 Multiple Vulnerabilities

The version of Apache ZooKeeper listening on the remote host is 3.8.x prior to 3.8.8 or 3.9.x prior to 3.9.7. It is, therefore, affected by multiple vulnerabilities: - Incorrect authorization due to a time-of-check to time-of-use TOCTOU race condition in the setACL request handling of Apache...

EulerOS 2.0 SP12 : rsyslog (EulerOS-SA-2026-4452)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

RHEL 9 : thunderbird (RHSA-2026:95597)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:95597 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libexpat: denial of service via crafted XML input...

EulerOS 2.0 SP12 : sg3_utils (EulerOS-SA-2026-4532)

According to the versions of the sg3utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...

RHEL 8 : gimp:2.8 (RHSA-2026:95482)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95482 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including...

AlmaLinux 9.2 [TuxCare] Security Update: libpcap / libpcap-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793973276)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793973276 advisory. - libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In...

TeamViewer < 13.2.36231 / 14.x < 14.7.48868 / 15.x < 15.64.10 / 15.65.x < 15.83 Heap Overflow (TV-2026-1011)

The version of TeamViewer installed on the remote Windows host is prior to 13.2.36231, 14.x prior to 14.7.48868, 15.x prior to 15.64.10, or 15.65.x prior to 15.83. It is, therefore, affected by a vulnerability as referenced in the TV-2026-1011 advisory: - An integer overflow in the remote-control...

MiracleLinux 9 : webkit2gtk3-2.54.2-0.el9_8.2 (AXSA:2026-2275:14)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2275:14 advisory. chromium-browser: skia: chromium-browser: skia: Use after free in Skia CVE-2026-85049 chromium-browser: skia: Skia: Cross-origin data disclosure via...

RHEL 9 : Satellite 6.17 (RHSA-2026:95656)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95656 advisory. This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address the vulnerabilities described...

RHEL 9 : Satellite 6.18 (RHSA-2026:95657)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95657 advisory. This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address the vulnerabilities described...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : ca-certificates update (USN-9001-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-9001-1 advisory. It was discovered that the ca-certificates JKS integration was not working properly, resulting in CA certificates removed from the...

Linux Distros Unpatched Vulnerability : CVE-2026-92694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in drawtableipv6 in...

Linux Distros Unpatched Vulnerability : CVE-2026-49272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require...

EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4441)

According to the versions of the popt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host...

Fedora 45 : perl-Starman (2026-c02d051eaf)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c02d051eaf advisory. Starman 0.4019 fixes several CVEs: Stream chunked request bodies to the temporary buffer instead of holding whole chunks in memory CVE-2026-115824...

JetBrains Rider < 2025.3.5.3 / 2026.1.x < 2026.1.5.3 / 2026.2.x < 2026.2.4 Certificate Validation

The version of JetBrains Rider installed on the remote host is prior to 2025.3.5.3, or is 2026.1.x prior to 2026.1.5.3, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability: - In JetBrains Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3...

Linux Distros Unpatched Vulnerability : CVE-2026-123036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-core. When a task marked nolog: true fails, the task result is censored before being emitted, but the exception field is retained...

EulerOS 2.0 SP12 : coreutils (EulerOS-SA-2026-4395)

According to the versions of the coreutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large...

EulerOS 2.0 SP12 : kbd (EulerOS-SA-2026-4487)

According to the versions of the kbd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented...

Apache ActiveMQ < 5.19.12 / 6.x < 6.3.3 Multiple Vulnerabilities

The version of Apache ActiveMQ running on the remote host is prior to 5.19.12, or 6.x prior to 6.3.3. It is, therefore, affected by multiple vulnerabilities: - Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime...

EulerOS 2.0 SP12 : open-iscsi (EulerOS-SA-2026-4505)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow vulnerability exists in the idbmrecinfoconfig function in open-iscsi iscsi- initiator-utils. An attacker can craft a...

EulerOS 2.0 SP12 : unbound (EulerOS-SA-2026-4460)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC...

Oracle Linux 8 : tesseract (ELSA-2026-95725)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95725 advisory. - Fix incomplete CVE-2026-88051: reset 'sizeused' on validation failure in 'GenericVector::read'; check 'fontinfotable' and 'fontsettable' read return...

Fedora 44 : python-mistune (2026-ea39a303cf)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ea39a303cf advisory. Update to 3.3.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 44 : rust-zstd / rust-zstd-safe / rust-zstd-safe7 / rust-zstd-sys / etc (2026-ab4ba75e47)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ab4ba75e47 advisory. - Update the zstd crate to version 0.14.3 and add a compat package for version 0.13. - Update the zstd-safe crate to version 8.2.0 and add a compat package f...

EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-4471)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

AlmaLinux 9.2 [TuxCare] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793953225)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793953225 advisory. - A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that...

EulerOS 2.0 SP12 : curl (EulerOS-SA-2026-4474)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to...

EulerOS 2.0 SP12 : python-pyasn1 (EulerOS-SA-2026-4525)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by...

EulerOS 2.0 SP12 : libkcapi (EulerOS-SA-2026-4415)

According to the versions of the libkcapi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter...

Fedora 44 : hatch (2026-01f9a44339)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-01f9a44339 advisory. Update to version 0.18.2. The latest managed CPython interpreters for Python 3.11 and later should now distrust the compromised eMudhra/emSign intermediate C...

RockyLinux 9 : glibc (RLSA-2026:95618)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95618 advisory. glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-89092 glibc: glibc DNS stub resolver: Denial of Service via long search domain in...

Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794007406)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794007406 advisory. - libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2 in lib/xmlparse.c that...

RHEL 8 : rsyslog (RHSA-2026:95573)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95573 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists,...

RHEL 8 : ruby:2.5 (RHSA-2026:95512)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95512 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

Linux Distros Unpatched Vulnerability : CVE-2026-52848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, an unauthenticated user could use a crafted URL to sk...

EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-4406)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated arra...

Linux Distros Unpatched Vulnerability : CVE-2026-122126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader, which TurnTlsSocket inherits, that allows malicious...

EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4518)

According to the versions of the popt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host...

EulerOS 2.0 SP12 : bison (EulerOS-SA-2026-4392)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Bison improperly handles grammardefined output paths. Grammar directives such as %output and %header allow specifying file paths, which are...

RHEL 7 : kernel-rt (RHSA-2026:95721)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95721 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Linux Distros Unpatched Vulnerability : CVE-2026-119051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten that allows attackers to create huge sparse arrays via unbounded...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150633)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150633 advisory. Unity Link Advisory UTSA-2026-150633 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-57152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and from 11.0.0 until 11.0.8, under certain conditions, GLPI permission logic...

Progress WS_FTP Server < 9.0.6 / 10.0.x < 10.0.3 Multiple Vulnerabilities

The version of Progress WSFTP Server installed on the remote Windows host is prior to 9.0.6 2024.0.6, or is 10.0.x prior to 10.0.3 2025.0.3. It is, therefore, affected by multiple vulnerabilities: - Improper authentication in Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3 ...

EulerOS 2.0 SP12 : sqlite (EulerOS-SA-2026-4456)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an...

EulerOS 2.0 SP12 : gdb (EulerOS-SA-2026-4480)

According to the versions of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker process...

RockyLinux 8 : kernel-rt (RLSA-2026:95100)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95100 advisory. kernel: sctp: stream: fully roll back denied add-stream state CVE-2026-52929 kernel: net/smc: fix UAF in smccdcrxhandler by pinning the socket...

Linux Distros Unpatched Vulnerability : CVE-2026-92698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, processsflowflowsample in src/sflowplugin/sflowcollector.cpp passes the...