RHEL 7 : pki-core (RHSA-2026:95182)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95182 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: pki-core: Dogtag/PKI:...

EulerOS 2.0 SP12 : NetworkManager (EulerOS-SA-2026-4389)

According to the versions of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties...

EulerOS 2.0 SP12 : gdk-pixbuf2 (EulerOS-SA-2026-4404)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profi...

EulerOS 2.0 SP12 : libtiff (EulerOS-SA-2026-4420)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in...

Linux Distros Unpatched Vulnerability : CVE-2026-108387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker- controlled data from several binary format plugins coul...

Apache ZooKeeper 3.7.0 - 3.8.7 / 3.9.x < 3.9.7 DoS (CVE-2026-100302)

The version of Apache ZooKeeper listening on the remote host is 3.7.0 through 3.8.7 or 3.9.x prior to 3.9.7. It is, therefore, affected by a denial of service vulnerability: - Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote...

EulerOS 2.0 SP12 : pcre2 (EulerOS-SA-2026-4435)

According to the versions of the pcre2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject.CVE-2026-89160 PCRE2 befo...

Rocky Linux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (ALMALINUX9.6:CLSA-2026:1793969685)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793969685 advisory. - The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' ...

EulerOS 2.0 SP12 : perl-Storable (EulerOS-SA-2026-4438)

According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...

Rocky Linux 9.6 [CIQ] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ciqsa-2026_1762)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261762 advisory. This advisory aggregates security fixes for the vim SRPM in CIQ LTS 9.6. It addresses 23 CVEs: CVE-2026-33412, CVE-2026-55892, CVE-2026-59858,...

Linux Distros Unpatched Vulnerability : CVE-2026-92697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled...

Linux Distros Unpatched Vulnerability : CVE-2026-123268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function...

AlmaLinux 9.2 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (ALMALINUX9.2:CLSA-2026:1794010651)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1794010651 advisory. - ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled...

EulerOS 2.0 SP12 : cpio (EulerOS-SA-2026-4396)

According to the versions of the cpio packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the...

Linux Distros Unpatched Vulnerability : CVE-2026-108946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. The ActiveMQ broker resolves connection, session and consumer state from ids...

Linux Distros Unpatched Vulnerability : CVE-2026-100302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-25263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. CVE-2026-25263 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-76181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap...

AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.6:CLSA-2026:1793956077)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793956077 advisory. - Python has added a denylist for known compromised certificates to the ssl module to ensure user safety even without certificate revocation...

Rocky Linux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.6:CLSA-2026:1793956077)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793956077 advisory. - Python has added a denylist for known compromised certificates to the ssl module to ensure user safety even without certificate revocatio...

Slackware Linux 15.0 / current httpd Vulnerability (SSA:2026-310-01)

The version of httpd installed on the remote host is prior to 2.4.70. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-310-01 advisory. New httpd packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descripti...

CentOS Linux 8.5 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (CENTOS8.5:CLSA-2026:1793958787)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793958787 advisory. - The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or...

F5 Networks BIG-IP : CPython vulnerability (K000164129)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4. It is, therefore, affected by a vulnerability as referenced in the K000164129 advisory. There is a defect in the CPython tarfile module affecting the TarFile extraction and entry enumeration APIs. The...

EulerOS 2.0 SP12 : gnupg2 (EulerOS-SA-2026-4484)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to ...

RockyLinux 9 : osbuild-composer (RLSA-2026:95272)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:95272 advisory. google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-84445 Tenable has extracted the preceding description block directly from...

Fedora 45 : perl-HTTP-Headers-ActionPack (2026-37e6cc76fc)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-37e6cc76fc advisory. HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. Version 0.10 uses...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-4496)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a...

EulerOS 2.0 SP12 : python-paramiko (EulerOS-SA-2026-4522)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the preceding...

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2026-4476)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine...

RHEL 8 : python36:3.6 (RHSA-2026:95578)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95578 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Oracle Linux 7 : firefox (ELSA-2026-76741)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-76741 advisory. - Update to 140.15.0 ESR Orabug: 40120040CVE-2026-16365CVE-2026-75874 CVE-2026-84119CVE-2026-84120CVE-2026-84121CVE-2026-84122CVE-2026-84124...

EulerOS 2.0 SP12 : xmlrpc-c (EulerOS-SA-2026-4464)

According to the versions of the xmlrpc-c packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page...

EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2026-4413)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

EulerOS 2.0 SP12 : libXfont2 (EulerOS-SA-2026-4412)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the...

RHEL 10 : goose (RHSA-2026:95724)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:95724 advisory. Problem Description: Security Fixes: goose: goose: Shell History and Environment Leak via Terminal Integration CVE-2026-111079 For more details abo...

Oracle Linux 7 : firefox (ELSA-2026-92363)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-92363 advisory. - Update to 140.17.0 ESR Orabug: 40229686CVE-2026-92035CVE-2026-96869 CVE-2026-100756CVE-2026-100757CVE-2026-100758CVE-2026-100759CVE-2026-100762...

EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-4436)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan...

RHEL 9 : goose (RHSA-2026:95723)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:95723 advisory. Problem Description: Security Fixes: goose: goose: Shell History and Environment Leak via Terminal Integration CVE-2026-111079 For more details abou...

EulerOS 2.0 SP12 : gnupg2 (EulerOS-SA-2026-4407)

According to the versions of the gnupg2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : CMS Cryptographic Message Syntax parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to ...

EulerOS 2.0 SP12 : lmdb (EulerOS-SA-2026-4501)

According to the versions of the lmdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the...

EulerOS 2.0 SP12 : libevent (EulerOS-SA-2026-4414)

According to the versions of the libevent packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c...

Rocky Linux 9.6 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools (ALMALINUX9.6:CLSA-2026:1793972443)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793972443 advisory. - Use-after-free in sequential reader when pngreadend called without reading image rows fedora-all CVE-2026-46675 Note that Nessus has not...

RHEL 7 : bind (RHSA-2026:95726)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95726 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

EulerOS 2.0 SP12 : nss (EulerOS-SA-2026-4427)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 153 and Thunderbird...

EulerOS 2.0 SP12 : docker-engine (EulerOS-SA-2026-4399)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine...

Fedora 45 : rust-zstd / rust-zstd-safe / rust-zstd-safe7 / rust-zstd-sys / etc (2026-852d99c4f2)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-852d99c4f2 advisory. - Update the zstd crate to version 0.14.3 and add a compat package for version 0.13. - Update the zstd-safe crate to version 8.2.0 and add a compat package f...

EulerOS 2.0 SP12 : libpcap (EulerOS-SA-2026-4416)

According to the versions of the libpcap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon u...

RHEL 10 : postgresql16-pgvector (RHSA-2026:95521)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:95521 advisory. Open-source vector similarity search for Postgres. Supports L2 distance, inner product, and cosine distance Security Fixes: pgvector: pgvector:...

MiracleLinux 9 : dotnet9.0-9.0.123-1.el9_8.ML.1 (AXSA:2026-2272:23)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2272:23 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Bug Fixes and Enhancements: Update .NET 9.0 t...

Linux Distros Unpatched Vulnerability : CVE-2026-115448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in Apache ZooKeeper. The server serializes its data tree to a snapshot by recursing one stack frame per znode level, with no depth bound....