Linux Distros Unpatched Vulnerability : CVE-2026-106073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync without the required read permission checks. This is an incomplete fix of...

Fedora 43 : python-cairosvg (2026-0a3e8cc0a0)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0a3e8cc0a0 advisory. Update to 2.9.1 upstream release CVE-2026-107378 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-111497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote...

Oracle JDeveloper Multiple Vulnerabilities (October 2026 CPU)

The version of Oracle JDeveloper installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Security...

Linux Distros Unpatched Vulnerability : CVE-2026-111817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed proxy.config.http.dropchunkedtrailers until the connection...

Fedora 43 : ntpsec (2026-cf1a6e2b9d)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cf1a6e2b9d advisory. Update to the latest upstream release, which has security fixes for CVE-2026-102483 CVE-2026-102484 CVE-2026-102485 CVE-2026-102486. Tenable has...

Linux Distros Unpatched Vulnerability : CVE-2026-114714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmailusercopy plugin. With the file based...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:4787-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4787-1 advisory. - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation bsc1268430. Tenab...

SUSE SLES15: pgvector-devel / postgresql16-pgvector / postgresql17-pgvector / etc (SUSE-SU-2026:4804-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4804-1 advisory. This update for pgvector fixes the following issue: - CVE-2026-103484: database users with the ability to create an IVFFlat index can write...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142490)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142490 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report...

Linux Distros Unpatched Vulnerability : CVE-2026-83381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143107 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6teui64: reject invalid MAC header for all packets eui64mt6 derives a modified EUI-6...

Linux Distros Unpatched Vulnerability : CVE-2026-114437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142470 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: altera-msgdma: properly free descriptor in msgdmafreedescriptor Remove listdel call in...

RHEL 8 : sudo (RHSA-2026:87026)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:87026 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

Rocky Linux 9 [CIQ] Security Update: cockpit-machines Multiple Vulnerabilities (crlsa-2026_86970)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686970 advisory. cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Data...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon (ALMALINUX9.2:CLSA-2026:1792659934)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792659934 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that...

RHEL 10 : iperf3 (RHSA-2026:88207)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:88207 advisory. Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter,...

Fedora 43 : libdigidocpp (2026-f1ce644e04)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f1ce644e04 advisory. - Upstream release 4.5.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Rocky Linux 9.6 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792623317)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792623317 advisory. - GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp- user-regexp has an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142493 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth-authorizerbuf,len after authorizer update cephxcreateauthorizer caches...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143077 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer befo...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142703 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fibnhcupdatemtu fibnhcupdatemtu walks the nexthop exception table und...

AlmaLinux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792704664)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792704664 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142719 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label wit...

Rocky Linux 10.2 [CIQ] Security Update: cockpit-machines Multiple Vulnerabilities (crlsa-2026_86971)

The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686971 advisory. cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Dat...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142522)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142522 advisory. In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring reconfiguration packetsetring updates the RX ring...

RHEL 8 : kernel (RHSA-2026:87091)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:87091 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: validate checksumstart before...

Linux Distros Unpatched Vulnerability : CVE-2025-55702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Server parses the unread body left on the...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142760 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix authchunklist capacity check in sctpauthepaddchunkid sctpauthepaddchunkid uses...

Fedora 43 : gnome-shell-extension-gsconnect (2026-eb93fa8f63)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eb93fa8f63 advisory. Voici les notes de la release, telles que publies par daniellandau le 2026-09-23 : --- Release GSConnect v73 What's Changed Security: fix authenticated path...

Linux Distros Unpatched Vulnerability : CVE-2026-111813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default unsigned configuration...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142706)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142706 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fbinfo-mode before deleting a videomode fbsetvar can delete a mode from info-modelis...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142736)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142736 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer iscsiscsicmdrsp copies the sense...

SUSE SLES15 Security Update : busybox (SUSE-SU-2026:4798-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4798-1 advisory. - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow whe...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142698)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142698 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142519 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump operations In net/ieee802154/netlink.c, the legacy...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142684 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143043)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143043 advisory. Due to a vulnerability in the iouring subsystem, it is possible to leak kernel memory information to the user process.timensinstall calls currentissinglethreaded to...

Oracle Linux 9 : qt5-qtbase (ELSA-2026-87082)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87082 advisory. - Fix CVE-2026-19248: unbounded recursion and ON2 behavior in QDom Resolves: RHEL-261136 Tenable has extracted the preceding description block directl...

Fedora 43 : linux-firmware (2026-bd021461a8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bd021461a8 advisory. Update to 20261019: rockchip: add PCIe3 PHY firmware for snps-pcie3 Update ADSP firmware for Qualcomm qcs615 platform. Revert amdgpu: update GC 11.0.0 firmwa...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142694 advisory. In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in keyextract When a packet arrives on an ARPHRDNON...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142686 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information...

Debian dsa-6576 : bind9 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6576 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6576-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-85555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PowerDNS reports: CVE-2026-85555 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142484)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142484 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAWPRIMITIVES header size before division vmwcmddraw computes maxnum =...

Linux Distros Unpatched Vulnerability : CVE-2026-114044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface buffers by...

Fedora 43 : nicotine+ (2026-843c104a8c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-843c104a8c advisory. Version 3.3.11 September 16, 2026 Changes Added menu items for moving column headers due to broken drag-and-drop in GTK Enabled fixed number of upload slots ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143075 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: clear skb2-cb in ip6ip6err ip6ip6err clones an outer IPv6 ICMP error skb, pulls it to...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142563)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142563 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, an...