EulerOS 2.0 SP12 : python-filelock (EulerOS-SA-2026-4520)

"According to the versions of the python-filelock package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition...

JetBrains Rider < 2025.3.5.3 / 2026.1.x < 2026.1.5.3 / 2026.2.x < 2026.2.4 Certificate Validation

The version of JetBrains Rider installed on the remote host is prior to 2025.3.5.3, or is 2026.1.x prior to 2026.1.5.3, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability: - In JetBrains Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3...

Fedora 45 : perl-Starman (2026-c02d051eaf)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c02d051eaf advisory. Starman 0.4019 fixes several CVEs: Stream chunked request bodies to the temporary buffer instead of holding whole chunks in memory CVE-2026-115824...

EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4441)

According to the versions of the popt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host...

EulerOS 2.0 SP12 : python-paramiko (EulerOS-SA-2026-4445)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2026-4539)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context...

AlmaLinux 9.2 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793991469)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793991469 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and...

AlmaLinux 9 : glibc (ALSA-2026:95618)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:95618 advisory. glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-89092 glibc: glibc DNS stub resolver: Denial of Service via long search domain in...

Oracle Linux 8 : kernel (ELSA-2026-95212)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95212 advisory. - net/smc: fix UAF in smccdcrxhandler by pinning the socket Jan Polensky RHEL-298266 CVE-2026-64541 - sctp: stream: fully roll back denied add-stream...

EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-4479)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c,...

EulerOS 2.0 SP12 : proftpd (EulerOS-SA-2026-4519)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows...

Linux Distros Unpatched Vulnerability : CVE-2026-57152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and from 11.0.0 until 11.0.8, under certain conditions, GLPI permission logic...

RHEL 7 : kernel-rt (RHSA-2026:95721)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95721 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

EulerOS 2.0 SP12 : bison (EulerOS-SA-2026-4392)

According to the versions of the bison packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Bison improperly handles grammardefined output paths. Grammar directives such as %output and %header allow specifying file paths, which are...

RHEL 9 : Satellite 6.19 (RHSA-2026:95652)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95652 advisory. This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address the vulnerabilities described...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150633)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150633 advisory. Unity Link Advisory UTSA-2026-150633 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Rocky Linux 8 [CIQ] Security Update: tang / tang-debuginfo / tang-debugsource (crlsa-2023_7022)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20237022 advisory. tang: Race condition exists in the key generation and rotation functionality CVE-2023-1672 Tenable has extracted the preceding description block directly from the C...

Linux Distros Unpatched Vulnerability : CVE-2026-119051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten that allows attackers to create huge sparse arrays via unbounded...

EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4518)

According to the versions of the popt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host...

Linux Distros Unpatched Vulnerability : CVE-2026-122126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader, which TurnTlsSocket inherits, that allows malicious...

EulerOS 2.0 SP12 : samba (EulerOS-SA-2026-4454)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly...

JetBrains GoLand < 2025.3.5.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Certificate Validation

The version of JetBrains GoLand installed on the remote host is prior to 2025.3.5.2, or 2026.1.x prior to 2026.1.5.1, or 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability: - In JetBrains GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2, the...

EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-4542)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An out-of-bounds read flaw was found in the X.Org X server and Xwayland in glXDispChangeDrawableAttributes. A wrong size validation check...

EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-4394)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

Linux Distros Unpatched Vulnerability : CVE-2026-77299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Regexp2 is a feature-rich RegExp engine for Go. Prior to version 2.3.0, when regexp2 compiles and matches a pattern containing a large fixed-count quantifier...

CentOS Linux 8.5 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1793994343)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793994343 advisory. - SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITELIMITEXPRDEPTH limit by...

EulerOS 2.0 SP12 : gdb (EulerOS-SA-2026-4403)

According to the versions of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker process...

Linux Distros Unpatched Vulnerability : CVE-2026-52848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, during the login phase, an unauthenticated user could use a crafted URL to sk...

EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-4406)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated arra...

Fedora 45 : freerdp (2026-f40014e752)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f40014e752 advisory. Update to 3.33.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

RHEL 8 : ruby:2.5 (RHSA-2026:95512)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95512 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

RHEL 9 : thunderbird (RHSA-2026:95596)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:95596 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libexpat: denial of service via crafted XML input...

Linux Distros Unpatched Vulnerability : CVE-2026-100300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree...

EulerOS 2.0 SP12 : open-isns (EulerOS-SA-2026-4506)

According to the versions of the open-isns packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through...

Linux Distros Unpatched Vulnerability : CVE-2026-103582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ the .NET OpenWire client, package Apache.NMS.ActiveMQ before 2.3.0. The...

Fedora 43 : tailscale (2026-0451d4f86a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0451d4f86a advisory. update to 1.102.5 ---- update to 1.98.10, fix several cves Tenable has extracted the preceding description block directly from the Fedora security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150632 advisory. Unity Link Advisory UTSA-2026-150632 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

RockyLinux 9 : glibc (RLSA-2026:95618)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95618 advisory. glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-89092 glibc: glibc DNS stub resolver: Denial of Service via long search domain in...

Rocky Linux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794007406)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794007406 advisory. - libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2 in lib/xmlparse.c that...

EulerOS 2.0 SP12 : open-iscsi (EulerOS-SA-2026-4505)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow vulnerability exists in the idbmrecinfoconfig function in open-iscsi iscsi- initiator-utils. An attacker can craft a...

Oracle Linux 8 : tesseract (ELSA-2026-95725)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95725 advisory. - Fix incomplete CVE-2026-88051: reset 'sizeused' on validation failure in 'GenericVector::read'; check 'fontinfotable' and 'fontsettable' read return...

EulerOS 2.0 SP12 : unbound (EulerOS-SA-2026-4460)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC...

Apache ActiveMQ < 5.19.12 / 6.x < 6.3.3 Multiple Vulnerabilities

The version of Apache ActiveMQ running on the remote host is prior to 5.19.12, or 6.x prior to 6.3.3. It is, therefore, affected by multiple vulnerabilities: - Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime...

Linux Distros Unpatched Vulnerability : CVE-2026-16491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana's RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted dashboard listings. A user with dashboar...

Apache ActiveMQ 5.19.x < 5.19.12 / 6.3.x < 6.3.3 Authorization Bypass

The version of Apache ActiveMQ running on the remote host is 5.19.x prior to 5.19.12, or 6.3.x prior to 6.3.3. It is, therefore, affected by an authorization bypass vulnerability. - Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlugin allows an...

Linux Distros Unpatched Vulnerability : CVE-2026-92698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, processsflowflowsample in src/sflowplugin/sflowcollector.cpp passes the...

EulerOS 2.0 SP12 : proftpd (EulerOS-SA-2026-4442)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows...

RHEL 9 : resteasy (RHSA-2026:95505)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95505 advisory. RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully...

SUSE SLES15: tomcat / tomcat-admin-webapps / tomcat-el-3_0-api / etc (SUSE-SU-2026:5116-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5116-1 advisory. - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure bsc1286502. - CVE-2026-74049: Jasper JSTL plug-in...

MiracleLinux 8 : bind9.16-9.16.23-0.22.el8_10.21 (AXSA:2026-2279:06)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2279:06 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 bind: BIND: Denial of Service via unbounded processing of crafted...