Linux Distros Unpatched Vulnerability : CVE-2026-123037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the ansible-core user module. When generatesshkey is enabled, User.sshkeygen guards the key files against symlinks but checks the /.ssh...

Rocky Linux 9.6 [TuxCare] Security Update: libXi / libXi-devel (ALMALINUX9.6:CLSA-2026:1793984702)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793984702 advisory. - A malicious X server could cause a heap overflow by injecting a large DEVICEENABLE reply when processed by libXi before 1.8.4...

RockyLinux 8 : xorg-x11-server-Xwayland (RLSA-2026:95281)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:95281 advisory. xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling CVE-2026-93520 Tenable has extracted the preceding...

SUSE SLES15 Security Update : aws-efs-utils (SUSE-SU-2026:5101-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5101-1 advisory. Security issues fixed: - CVE-2026-16317: s2n-tls: man-in-the-middle attack can silently discard individual application data records...

Linux Distros Unpatched Vulnerability : CVE-2026-122129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::readstartheader that allows unauthenticated attackers to exhaust...

MiracleLinux 9 : curl-7.76.1-40.el9_8.9 (AXSA:2026-2280:09)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2280:09 advisory. libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 Tenable has extracted the preceding description block directly...

Linux Distros Unpatched Vulnerability : CVE-2026-55458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.5, the reverse proxy's finalizeResponse method in...

EulerOS 2.0 SP12 : xmlrpc-c (EulerOS-SA-2026-4541)

According to the versions of the xmlrpc-c packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page...

EulerOS 2.0 SP12 : vim (EulerOS-SA-2026-4462)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context...

EulerOS 2.0 SP12 : libevent (EulerOS-SA-2026-4491)

According to the versions of the libevent packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c...

EulerOS 2.0 SP12 : libssh (EulerOS-SA-2026-4418)

According to the versions of the libssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated da...

Squid < 7.7 FTP Command Injection (SQUID-2026:9)

The version of Squid on the remote host is prior to 7.7. It is, therefore, affected by a command injection vulnerability: - Due to an Improper Validation of Syntactic Correctness bug, Squid is vulnerable to a command injection attack against the FTP gateway. This problem allows a trusted client t...

EulerOS 2.0 SP12 : libpcap (EulerOS-SA-2026-4493)

According to the versions of the libpcap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon u...

TeamViewer < 13.2.154007 / 14.x < 14.7.48868 / 15.x < 15.83 Multiple Vulnerabilities (macOS) (TV-2026-1011)

The version of TeamViewer installed on the remote macOS host is prior to 13.2.154007, 14.x prior to 14.7.48868, or 15.x prior to 15.83. It is, therefore, affected by multiple vulnerabilities as referenced in the TV-2026-1011 advisory: - An out-of-bounds write vulnerability in the screen-image...

EulerOS 2.0 SP12 : python-lxml (EulerOS-SA-2026-4444)

According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missin...

Python Library Django 5.2.x < 5.2.19 / 6.0.x < 6.0.10 / 6.1.x < 6.1.3 Multiple Vulnerabilities

The detected version of the Django Python package is 5.2.x prior to 5.2.19, or 6.0.x prior to 6.0.10, or 6.1.x prior to 6.1.3. It is, therefore, affected by multiple vulnerabilities, including: - django.contrib.gis.gdal.OGRGeometry does not restrict external coordinate reference system definition...

Linux Distros Unpatched Vulnerability : CVE-2026-121006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with...

Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2026_95194)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695194 advisory. chromium-browser: skia: chromium-browser: skia: Use after free in Skia CVE-2026-85049 chromium-browser: skia: Skia: Cross-origin data disclosure via...

Fedora 45 : hatch (2026-1168b946ef)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1168b946ef advisory. Update to version 0.18.2. The latest managed CPython interpreters for Python 3.11 and later should now distrust the compromised eMudhra/emSign intermediate C...

CentOS Linux 8.5 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (CENTOS8.5:CLSA-2026:1793958787)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793958787 advisory. - The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or...

Linux Distros Unpatched Vulnerability : CVE-2026-103653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability in the Qt CoAP message parsing QCoapInternalReply::createFromFrame of the Qt CoAP module. Processing a malformed CoAP messag...

F5 Networks BIG-IP : CPython vulnerability (K000164129)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4. It is, therefore, affected by a vulnerability as referenced in the K000164129 advisory. There is a defect in the CPython tarfile module affecting the TarFile extraction and entry enumeration APIs. The...

EulerOS 2.0 SP12 : gnupg2 (EulerOS-SA-2026-4484)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to ...

RockyLinux 9 : osbuild-composer (RLSA-2026:95272)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:95272 advisory. google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-84445 Tenable has extracted the preceding description block directly from...

Fedora 45 : perl-HTTP-Headers-ActionPack (2026-37e6cc76fc)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-37e6cc76fc advisory. HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. Version 0.10 uses...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-4496)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a...

MiracleLinux 9 : cockpit-356.4-1.el9_8.ML.1 (AXSA:2026-2267:16)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2267:16 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit: Cockpit: Denial of Servi...

EulerOS 2.0 SP12 : python-paramiko (EulerOS-SA-2026-4522)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-47678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, any authenticated user can submit crafted values to the dropdown...

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2026-4476)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine...

RHEL 8 : python36:3.6 (RHSA-2026:95578)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95578 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Linux Distros Unpatched Vulnerability : CVE-2026-122127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers...

Oracle Linux 7 : firefox (ELSA-2026-76741)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-76741 advisory. - Update to 140.15.0 ESR Orabug: 40120040CVE-2026-16365CVE-2026-75874 CVE-2026-84119CVE-2026-84120CVE-2026-84121CVE-2026-84122CVE-2026-84124...

EulerOS 2.0 SP12 : xmlrpc-c (EulerOS-SA-2026-4464)

According to the versions of the xmlrpc-c packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page...

EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2026-4413)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

EulerOS 2.0 SP12 : libXfont2 (EulerOS-SA-2026-4412)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the...

RHEL 10 : goose (RHSA-2026:95724)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:95724 advisory. Problem Description: Security Fixes: goose: goose: Shell History and Environment Leak via Terminal Integration CVE-2026-111079 For more details abo...

Linux Distros Unpatched Vulnerability : CVE-2026-121969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSMessage in short.c that allows malicious servers to overflow a...

Oracle Linux 7 : firefox (ELSA-2026-92363)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-92363 advisory. - Update to 140.17.0 ESR Orabug: 40229686CVE-2026-92035CVE-2026-96869 CVE-2026-100756CVE-2026-100757CVE-2026-100758CVE-2026-100759CVE-2026-100762...

EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-4436)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan...

RHEL 9 : goose (RHSA-2026:95723)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:95723 advisory. Problem Description: Security Fixes: goose: goose: Shell History and Environment Leak via Terminal Integration CVE-2026-111079 For more details abou...

EulerOS 2.0 SP12 : gnupg2 (EulerOS-SA-2026-4407)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to ...

EulerOS 2.0 SP12 : lmdb (EulerOS-SA-2026-4501)

According to the versions of the lmdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the...

EulerOS 2.0 SP12 : libevent (EulerOS-SA-2026-4414)

According to the versions of the libevent packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c...

Rocky Linux 9.6 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools (ALMALINUX9.6:CLSA-2026:1793972443)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793972443 advisory. - Use-after-free in sequential reader when pngreadend called without reading image rows fedora-all CVE-2026-46675 Note that Nessus has not...

RHEL 7 : bind (RHSA-2026:95726)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95726 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

EulerOS 2.0 SP12 : nss (EulerOS-SA-2026-4427)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird...

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2026-4399)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine...

Fedora 45 : rust-zstd / rust-zstd-safe / rust-zstd-safe7 / rust-zstd-sys / etc (2026-852d99c4f2)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-852d99c4f2 advisory. - Update the zstd crate to version 0.14.3 and add a compat package for version 0.13. - Update the zstd-safe crate to version 8.2.0 and add a compat package f...

Linux Distros Unpatched Vulnerability : CVE-2026-111754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, a...