MiracleLinux 9 : libpq-13.23-3.el9_8 (AXSA:2026-1531:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1531:04 advisory. postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-70461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte pa...

Fedora 44 : linux-firmware (2026-c53019ed4f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c53019ed4f advisory. Update to 20260810: amdgpu: numerous firmware updates update firmware for MT7922 WiFi device morsemicro: add firmware for mm8108 support ath10k: WCN3990 hw1....

Linux Distros Unpatched Vulnerability : CVE-2026-14679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write onl...

Debian dsa-6437 : libaprutil1-dbd-mysql - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6437 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6437-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-68452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/zcrypt: Validate length for CCA AES cipher key requests ccacipher2protkey derives the copy length for the CPRB parameter block directly from the length fie...

Linux Distros Unpatched Vulnerability : CVE-2026-48791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Version 2.0.0 erroneously removed verification of the integrated Rekor ent...

openSUSE 16 Security Update : librest0_7 (openSUSE-SU-2026:21563-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21563-1 advisory. Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44. Tenable has extracted the preceding...

Debian dla-4737 : xnest - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4737 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4737-1 [email protected]...

Debian dsa-6436 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6436 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6436-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-48552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js. Unencoded JSON string values reflected...

Linux Distros Unpatched Vulnerability : CVE-2026-73501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil...

RockyLinux 8 : python-idna (RLSA-2026:54290)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:54290 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...

openSUSE 16 Security Update : perl-Date-Manip (openSUSE-SU-2026:21552-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21552-1 advisory. This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits...

Linux Distros Unpatched Vulnerability : CVE-2026-15741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect...

MiracleLinux 9 : dovecot-2.3.16-18.el9_8.1 (AXSA:2026-1524:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1524:06 advisory. dovecot: Dovecot: Denial of Service via excessive IMAP bracing CVE-2026-42006 Tenable has extracted the preceding description block directly from the...

GLSA-202608-02 : FreeType: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-02 FreeType: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

Linux Distros Unpatched Vulnerability : CVE-2026-71290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicyBUILTIN setting has no effect when used...

Linux Distros Unpatched Vulnerability : CVE-2026-70458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entrie...

Linux Distros Unpatched Vulnerability : CVE-2026-14681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pghba.conf rules, via initial direct TLS...

Vim < 9.2.0842 Stack-based Buffer Overflow (GHSA-49m8-wwxj-mr69)

The version of Vim installed on the remote host is prior to 9.2.0842. It is, therefore, affected by a vulnerability as referenced in the GHSA-49m8-wwxj-mr69 advisory. - The socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors ...

Oracle Linux 10 : python-idna (ELSA-2026-54481)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-54481 advisory. - Fix CVE-2026-45409: quadratic time complexity in IDNA validation Tenable has extracted the preceding description block directly from the Oracle Linux securi...

RHEL 9 : dracut (RHSA-2026:54571)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:54571 advisory. The dracut packages contain an event-driven initial RAM file system initramfs generator infrastructure based on the udev device manager. The virtual...

MiracleLinux 9 : libtiff-4.4.0-18.el9_8.1 (AXSA:2026-1530:09)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1530:09 advisory. libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image CVE-2026-12912 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-73584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary...

Oracle Linux 10 : freerdp (ELSA-2026-54486)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54486 advisory. 2:3.10.3-12.8 - Backport several CVE fixes CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580 Resolves:...

Linux Distros Unpatched Vulnerability : CVE-2026-53803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable...

AlmaLinux 9 : python-idna (ALSA-2026:54484)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:54484 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-29036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c tha...

openSUSE 16 Security Update : gitoxide (openSUSE-SU-2026:21558-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21558-1 advisory. Changes in gitoxide: - Update to 0.56.0: Fixes CVE-2026-40034 boo1266434: the CommandForbiddenInModules trust check could be bypassed in...

AlmaLinux 9 : python3.9 (ALSA-2026:54268)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:54268 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding descriptio...

Palo Alto Networks PAN-OS 10.2.x < 10.2.8 / 11.1.x < 11.1.16-h1 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.8 or 11.1.x prior to 11.1.16-h1. It is, therefore, affected by a vulnerability. An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS software enables an...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3594-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3594-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31450:...

Alibaba Cloud Linux 3 : 0255: resource-agents (ALINUX3-SA-2026:0255)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0255 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-44431: urllib3 is an HTTP client library f...

Linux Distros Unpatched Vulnerability : CVE-2026-16033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata...

RHEL 8 : compat-libtiff3 (RHSA-2026:54638)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:54638 advisory. The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This...

Linux Distros Unpatched Vulnerability : CVE-2026-70455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias f...

FFmpeg 3.0 < 9.0 Multiple Vulnerabilities

The version of FFmpeg installed on the remote host is 3.0 or later but prior to 9.0. It is, therefore, affected by multiple vulnerabilities: - An uninitialized heap memory read vulnerability in the native RSCC decoder libavcodec/rscc.c allows attackers to disclose heap memory contents by supplyin...

Linux Distros Unpatched Vulnerability : CVE-2026-18710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log...

openSUSE 16 Security Update : libssh2_org (openSUSE-SU-2026:21549-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21549-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow ...

Apache CXF < 3.6.12 / 4.x < 4.1.8 / 4.2.x < 4.2.3 Multiple Vulnerabilities

The version of Apache CXF installed on the remote host is prior to 3.6.12, or 4.x prior to 4.1.8, or 4.2.x prior to 4.2.3. It is, therefore, affected by multiple vulnerabilities, including: - The JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserializatio...

Linux Distros Unpatched Vulnerability : CVE-2026-48550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter. An...

Security Updates for Microsoft Access Products C2R (August 2026)

The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. CVE-2026-64906, CVE-2026-64908, CVE-2026-64914, CVE-2026-64920 -...

RHEL 10 : .NET 9.0 (RHSA-2026:54590)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54590 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

Linux Distros Unpatched Vulnerability : CVE-2026-14663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL versi...

SUSE SLED15: openvpn / openvpn-auth-pam-plugin / openvpn-dco / openvpn-dco-devel / etc (SUSE-SU-2026:3596-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3596-1 advisory. - CVE-2026-11771: NTLM proxy auth stack off-by-one write bsc1273126. - CVE-2026-12932: memory leak using...

RHEL 10 : python-idna (RHSA-2026:54481)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:54481 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

Linux Distros Unpatched Vulnerability : CVE-2026-70452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution...

FFmpeg 4.4 < 9.0 Out-of-Bounds Heap Write (CVE-2026-70632)

The version of FFmpeg installed on the remote host is 4.4 or later but prior to 9.0. It is, therefore, affected by an out-of-bounds heap write vulnerability: - An out-of-bounds heap write vulnerability in the native GoPro CineForm HD CFHD decoder allows remote attackers to corrupt heap memory by...

MiracleLinux 8 : python-idna-2.5-8.el8_10 (AXSA:2026-1519:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1519:01 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...