Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143045)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143045 advisory. A use-after-free vulnerability in the Linux kernel's afunix component can be exploited to achieve local privilege escalation. The unixstreamsendpage function tries t...

Linux Distros Unpatched Vulnerability : CVE-2026-101774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are MySQL Serve...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143122 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ringlen param The ringlen parameter provided by the virtual function VF ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142693 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the...

SUSE SLES15 Security Update : podman (SUSE-SU-2026:4747-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4747-1 advisory. This update for podman rebuilds it against the current go security release. Tenable has extracted the preceding description block directly...

Oracle Linux 10 : expat (ELSA-2026-88248)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88248 advisory. - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - CVE-2026-77214 expat: expat: Information disclosure via heap...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142536)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142536 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix addrwqtimer race in sctpfreeaddrwq sctpfreeaddrwq previously removed addrwqtimer using...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142553 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: validate offshift to prevent shift-out-of-bounds u32change copies the...

FreeBSD : p5-DBI -- Prevent dbi_profile crash (23eecf73-cd85-11f1-97dc-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 23eecf73-cd85-11f1-97dc-40b034429ecf advisory. DBI project reports: Prevent dbiprofile crash CVE-2026-108518 Henrik Teichmann. Tenable has extracted t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143025)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143025 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in in6devstatsget devgetbyindexrcu could return NULL if t...

Rocky Linux 9 [CIQ] Security Update: hostapd / hostapd-debuginfo / hostapd-debugsource (crlsa-2026_85277)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685277 advisory. hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request CVE-2026-58374 Tenable has extracted the preceding description...

Rocky Linux 10.2 [CIQ] Security Update: librsvg2 / librsvg2-debuginfo / librsvg2-debugsource / etc (crlsa-2026_86841)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202686841 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block direct...

AlmaLinux 9.2 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792636681)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792636681 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and...

RHEL 9 : .NET 8.0 (RHSA-2026:88425)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88425 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2026_86172)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686172 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Informatio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143051)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143051 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2026_86170)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686170 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142485 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path For non-SRQ QPs, the responder reads W...

Rocky Linux 10.2 [CIQ] Security Update: lrzsz / lrzsz-debuginfo / lrzsz-debugsource Multiple Vulnerabilities (crlsa-2026_86056)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686056 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via...

AlmaLinux 9.6 [TuxCare] Security Update: mod_auth_openidc (ALMALINUX9.6:CLSA-2026:1792634626)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792634626 advisory. - modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID...

CentOS Linux 6 [TuxCare] Security Update: gawk Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792508988)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792508988 advisory. - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read...

CentOS Linux 7 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-devel / etc (CENTOS7:CLSA-2026:1792580871)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792580871 advisory. - A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142720 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143059)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143059 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix skredir use-after-free in send verdict skpsockmsgverdict takes a socket referen...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143078 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory...

RHEL 8 : kernel-rt (RHSA-2026:87374)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87374 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143058 advisory. In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-socket transmit path packetparseheaders resets the...

Rocky Linux 9 [CIQ] Security Update: qt5-qtbase / qt5-qtbase-common / qt5-qtbase-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_87082)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687082 advisory. qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization CVE-2026-11573 qt5-qtbase: qt6-qtbase: Qt: Denia...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142480 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvecrxcompleted In nvecrxcompleted, when an incomplete RX...

SUSE SLES15 Security Update : kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:4748-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4748-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143082 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports...

Fortinet Fortigate 7.2.0 < 7.2.14 / 7.4.0 < 7.4.13 / 7.6.0 < 7.6.8 / 8.0.0 < 8.0.2 Multiple Vulnerabilities

The version of FortiOS installed on the remote host is 7.2.x prior to 7.2.14, 7.4.x prior to 7.4.13, 7.6.x prior to 7.6.8, or 8.0.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the Fortinet security hardening release announcement. Fortinet states that th...

SUSE SLED15 / SLES15 Security Update : libraw (SUSE-SU-2026:4829-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4829-1 advisory. This update for libraw fixes the following issue: - CVE-2026-88387: incorrect numeric conversion in LibRaw::parsetiffif...

Oracle MySQL Connectors ODBC (October 2026 CPU)

The versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is 26.7.1...

Fedora 43 : ca-certificates (2026-0500e01d86)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0500e01d86 advisory. Update ca-certificates to ca-certificates-2026.2.92v9.0.319-1.fc43 Tenable has extracted the preceding description block directly from the Fedora security...

RHEL 10 : sudo (RHSA-2026:86633)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:86633 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143096 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call ntfsbadinode when failing to rename It is safe to call ntfsbadinode on live inodes...

openSUSE 16 Security Update : putty (openSUSE-SU-2026:22127-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22127-1 advisory. Changes in putty: - Update to release 0.85 Fixed a remotely triggerable use-after-free in Pageant. Fixed a remotely triggerable buffer overflow ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142731 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142764 advisory. In the Linux kernel, the following vulnerability has been resolved: driver core: use READONCE for dev-driver in devhassyncstate devhassyncstate reads dev-driver twic...

Dell Alienware Command Center < 6.14.54.0 Least Privilege Violation (DSA-2026-418)

The version of Dell Alienware Command Center AWCC installed on the remote host is prior to 6.14.54.0. It is, therefore, affected by a least privilege violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileg...

Linux Distros Unpatched Vulnerability : CVE-2026-85557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PowerDNS reports: CVE-2026-85557 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

SUSE SLES12: ImageMagick-config-6-SUSE / ImageMagick-config-6-upstream / etc (SUSE-SU-2026:4753-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4753-1 advisory. - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. - CVE-2026-106565: a missing...

Linux Distros Unpatched Vulnerability : CVE-2026-102484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memor...

Linux Distros Unpatched Vulnerability : CVE-2026-111810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a request carrying many suc...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142717 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs duri...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142557)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142557 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decodenewupstateweight If a message of type CEPHMSGOSDMAP...

SUSE SLED15 / SLES15 Security Update : rekor (SUSE-SU-2026:4750-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4750-1 advisory. This update for rekor rebuilds it against the current go security release. Tenable has extracted the preceding...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142752)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142752 advisory. In the Linux kernel, the following vulnerability has been resolved: um: vector: fix use-after-free in vectormmsgrx When vectormmsgrx discards a packet whose overlay...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143124 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that th...