AlmaLinux 8 : php:7.4 (ALSA-2026:87080)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:87080 advisory. php: php: Out-of-bounds read via empty HTTP redirect Location header CVE-2026-93682 php: PHP: Archive entry injection via integer overflow in TAR parser...

Fedora 43 : ca-certificates (2026-0500e01d86)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0500e01d86 advisory. Update ca-certificates to ca-certificates-2026.2.92v9.0.319-1.fc43 Tenable has extracted the preceding description block directly from the Fedora security...

SUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2026:4829-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4829-1 advisory. This update for libraw fixes the following issue: - CVE-2026-88387: incorrect numeric conversion in LibRaw::parsetiffif...

RHEL 10 : sudo (RHSA-2026:86633)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:86633 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

Oracle Linux 10 : expat (ELSA-2026-88248)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88248 advisory. - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - CVE-2026-77214 expat: expat: Information disclosure via heap...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142752)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142752 advisory. In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143058 advisory. In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packetparseheaders resets the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142733 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143079 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the out...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142702)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142702 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142544)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142544 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in...

Linux Distros Unpatched Vulnerability : CVE-2026-111816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out...

Linux Distros Unpatched Vulnerability : CVE-2026-114731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability in the CSS proxy the utils/modcss actio...

AlmaLinux 9 : fetchmail (ALSA-2026:86981)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:86981 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description block...

CentOS Linux 7 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (CENTOS7:CLSA-2026:1792486744)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792486744 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143093 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142547)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142547 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143054 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from dentry in event btrfssyncfile If overlay is used ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142476)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142476 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image...

TencentOS Server 3: gimp:2.8 (TSSA-2026:1195)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1195 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Citrix Workspace App for Windows Out-of-bounds Write (CVE-2026-84419) (CTX697181)

The version of Citrix Workspace App for Windows installed on the remote host is 2507.1 LTSR prior to 2507.1 LTSR CU3 Hotfix 1, or Current Release prior to 2603.20, or 2607 LTSR prior to 2607 LTSR Hotfix 1. It is, therefore, affected by an out-of-bounds write vulnerability as referenced in the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143104 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd-producer if updating IRTE for bypass fails Nullify irqfd-producer if...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143124 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that th...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142499 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown cephdestroyclient tears down the monitor...

SUSE SLES12 Security Update : kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4776-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4776-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: -...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142717 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs duri...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142557 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decodenewupstateweight If a message of type CEPHMSGOSDMAP...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143035)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143035 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdrbuftrim: clamp buf-len to avoid underflow xdrbuftrim trims len bytes from the tail of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143046)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143046 advisory. An out-of-bounds read vulnerability was found in smb2dumpdetail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the...

Amazon Linux 2023 : php8.3, php8.3-bcmath, php8.3-cli (ALAS2023-2026-3302)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3302 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142526)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142526 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143105)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143105 advisory. In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation skbudptunnelsegment gets the UDP header...

AlmaLinux 9 : cockpit-files (ALSA-2026:84595)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:84595 advisory. cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202 cockpit-files: cockpit-files: Loca...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142498 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume...

Oracle Linux 9 : php:8.3 (ELSA-2026-87079)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87079 advisory. php 8.3.36-1 - rebase to 8.3.36 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142483 advisory. In the Linux kernel, the following vulnerability has been resolved: netlink: annotate lockless accesses to nlk-maxrecvmsglen syzbot reported a data-race in data-race...

AlmaLinux 10 : librsvg2 (ALSA-2026:86841)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:86841 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block directl...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142532 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parse...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143051)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143051 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143110)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143110 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: read le-link under the node lock in tipcnodelinkdown tipcnodelinkdown caches the link...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142560 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAPNETADMIN in the device netns for changelink ipip6changelink operates on at...

Linux Distros Unpatched Vulnerability : CVE-2026-91402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are...

Linux Distros Unpatched Vulnerability : CVE-2026-79752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract,...

AlmaLinux 9.2 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792636681)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792636681 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143026 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats...

Oracle MySQL Connectors J (October 2026 CPU)

The versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Difficul...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143057)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143057 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information...

Fortinet FortiAnalyzer 7.2.0 < 7.2.13 / 7.4.0 < 7.4.12 / 7.6.0 < 7.6.8 / 8.0.0 < 8.0.2 Multiple Vulnerabilities

The version of FortiAnalyzer installed on the remote host is 7.2.x prior to 7.2.13, 7.4.x prior to 7.4.12, 7.6.x prior to 7.6.8, or 8.0.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the Fortinet security hardening release announcement. Fortinet states...

Slackware Linux 15.0 kernel-generic Vulnerability (SSA:2026-295-01)

The version of kernel-generic installed on the remote host is prior to 5.15.223 / 5.15.223smp. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-295-01 advisory. New kernel packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142758 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The...