RHEL 10 : cockpit-files (RHSA-2026:95570)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:95570 advisory. A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via...

Dnspython < 2.9.0 DoS

The version of dnspython installed on the remote host is prior to 2.9.0. It is, therefore, affected by a denial of service vulnerability: - dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit...

EulerOS 2.0 SP12 : curl (EulerOS-SA-2026-4474)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to...

EulerOS 2.0 SP12 : python-pyasn1 (EulerOS-SA-2026-4525)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by...

SUSE SLES15: kernel-livepatch-5_14_21-150400_24_243-default / etc (SUSE-SU-2026:5107-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:5107-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.243 fixes one security issue: The following security issue was fixed: -...

SUSE SLES12 Security Update : curl (SUSE-SU-2026:5071-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5071-1 advisory. - CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. - CVE-2026-11856: cross-origin Digest auth state leak...

Fedora 45 : goose (2026-5778d995b3)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5778d995b3 advisory. Update to goose-1.45.0-2.fc45. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2026_95212)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695212 advisory. kernel: sctp: stream: fully roll back denied add-stream state CVE-2026-52929 kernel: net/smc: fix UAF in smccdcrxhandler by pinning the socket...

SUSE SLES15 Security Update : cephfs (SUSE-SU-2026:5111-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5111-1 advisory. This update for cephfs fixes the following security issues: - CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in...

Oracle Linux 7 : firefox (ELSA-2026-83496)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-83496 advisory. - Update to 140.16.0 ESR Orabug: 40189898CVE-2026-92005CVE-2026-92006 CVE-2026-92007CVE-2026-92008CVE-2026-92009CVE-2026-92010CVE-2026-92011...

Fedora 44 : python-mistune (2026-ea39a303cf)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ea39a303cf advisory. Update to 3.3.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 44 : rust-zstd / rust-zstd-safe / rust-zstd-safe7 / rust-zstd-sys / etc (2026-ab4ba75e47)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ab4ba75e47 advisory. - Update the zstd crate to version 0.14.3 and add a compat package for version 0.13. - Update the zstd-safe crate to version 8.2.0 and add a compat package f...

RHEL 8 : rsyslog (RHSA-2026:95573)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95573 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists,...

AlmaLinux 9.2 [TuxCare] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793953225)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793953225 advisory. - A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that...

EulerOS 2.0 SP12 : libkcapi (EulerOS-SA-2026-4415)

According to the versions of the libkcapi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter...

EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-4471)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

Fedora 44 : hatch (2026-01f9a44339)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-01f9a44339 advisory. Update to version 0.18.2. The latest managed CPython interpreters for Python 3.11 and later should now distrust the compromised eMudhra/emSign intermediate C...

FreeBSD : Keycloak -- multiple vulnerabilities (06eeb817-d93d-11f1-908f-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 06eeb817-d93d-11f1-908f-3c7c3fba4204 advisory. The Keycloak Team reports: Tenable has extracted the preceding description block directly from...

EulerOS 2.0 SP12 : tar (EulerOS-SA-2026-4536)

According to the versions of the tar packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2026-4482)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails t...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:5119-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5119-1 advisory. - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index...

Python Library Django 6.0.x < 6.0.10 / 6.1.x < 6.1.3 Information Disclosure

The detected version of the Django Python package is 6.0.x prior to 6.0.10, or 6.1.x prior to 6.1.3. It is, therefore, affected by an information disclosure vulnerability as referenced by the security release advisory: - The django.contrib.admin.utils.displayforfield function did not obfuscate th...

EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2026-4490)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

EulerOS 2.0 SP12 : dracut (EulerOS-SA-2026-4477)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory...

Linux Distros Unpatched Vulnerability : CVE-2026-123269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the function libvmdkdescriptorfilereadheader of the file...

RHEL 7 : kernel (RHSA-2026:95556)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95556 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfnetlinkcthelper:...

Fedora 44 : perl-HTTP-Headers-ActionPack (2026-e94650c1ee)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e94650c1ee advisory. HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. Version 0.10 uses...

Fedora 45 : tor (2026-2e080d83b2)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2e080d83b2 advisory. Update to latest upstream release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150630 advisory. Unity Link Advisory UTSA-2026-150630 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

EulerOS 2.0 SP12 : mariadb-connector-c (EulerOS-SA-2026-4502)

According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validat...

MiracleLinux 9 : dotnet8.0-8.0.133-1.el9_8.ML.1 (AXSA:2026-2268:23)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2268:23 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privile...

EulerOS 2.0 SP12 : perl-Storable (EulerOS-SA-2026-4515)

According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...

RHEL 10 : libX11 (RHSA-2026:95499)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95499 advisory. The libX11 packages contain the core X11 protocol client library. Security Fixes: libX11: libX11: Heap-based buffer overflow via malicious X server...

EulerOS 2.0 SP12 : curl (EulerOS-SA-2026-4397)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to...

MiracleLinux 9 : curl-7.76.1-40.el9_8.9 (AXSA:2026-2280:09)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2280:09 advisory. libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 Tenable has extracted the preceding description block directly...

Linux Distros Unpatched Vulnerability : CVE-2026-122129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::readstartheader that allows unauthenticated attackers to exhaust...

RHEL 8 : bind (RHSA-2026:95477)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95477 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

Fedora 43 : perl-Starman (2026-a2df1dfb37)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a2df1dfb37 advisory. Starman 0.4019 fixes several CVEs: Stream chunked request bodies to the temporary buffer instead of holding whole chunks in memory CVE-2026-115824...

RHEL 7 : pcre2 (RHSA-2026:95371)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95371 advisory. The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching...

EulerOS 2.0 SP12 : kbd (EulerOS-SA-2026-4487)

According to the versions of the kbd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented...

EulerOS 2.0 SP12 : coreutils (EulerOS-SA-2026-4395)

According to the versions of the coreutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large...

Linux Distros Unpatched Vulnerability : CVE-2026-123036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-core. When a task marked nolog: true fails, the task result is censored before being emitted, but the exception field is retained...

EulerOS 2.0 SP12 : python-filelock (EulerOS-SA-2026-4520)

"According to the versions of the python-filelock package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition...

JetBrains Rider < 2025.3.5.3 / 2026.1.x < 2026.1.5.3 / 2026.2.x < 2026.2.4 Certificate Validation

The version of JetBrains Rider installed on the remote host is prior to 2025.3.5.3, or is 2026.1.x prior to 2026.1.5.3, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability: - In JetBrains Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3...

Fedora 45 : perl-Starman (2026-c02d051eaf)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c02d051eaf advisory. Starman 0.4019 fixes several CVEs: Stream chunked request bodies to the temporary buffer instead of holding whole chunks in memory CVE-2026-115824...

EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4441)

According to the versions of the popt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host...

EulerOS 2.0 SP12 : python-paramiko (EulerOS-SA-2026-4445)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2026-4539)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context...

AlmaLinux 9.2 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793991469)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793991469 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and...

AlmaLinux 9 : glibc (ALSA-2026:95618)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:95618 advisory. glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-89092 glibc: glibc DNS stub resolver: Denial of Service via long search domain in...