Fedora 45 : gpsd (2026-d39bedb422)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d39bedb422 advisory. Security fix for CVE-2026-60122 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

RHEL 10 : kernel (RHSA-2026:95367)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95367 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: writeback: fix race between...

EulerOS 2.0 SP12 : libsoup (EulerOS-SA-2026-4494)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. Wh...

EulerOS 2.0 SP12 : patch (EulerOS-SA-2026-4434)

According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a denial of service DoS due to improper validation of hunk single block of changes in diff line offsets in unified-diff...

EulerOS 2.0 SP12 : kata-containers (EulerOS-SA-2026-4409)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

Linux Distros Unpatched Vulnerability : CVE-2026-33379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user with any role, including Viewer or a service account with no permissions, can create, externally publish, and delete dashboard snapshots missing...

EulerOS 2.0 SP12 : busybox (EulerOS-SA-2026-4393)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component...

Oracle Linux 9 : glibc (ELSA-2026-95618)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95618 advisory. - CVE-2026-86805: Dynamic linker privilege escalation in ATSECURE programs RHEL-267210 - CVE-2026-95818: Buffer overflow in dynamic linker processing...

Rocky Linux 9 [CIQ] Security Update: virtio-win (crlba-2026_56986)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-202656986 advisory. The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware...

EulerOS 2.0 SP12 : libssh (EulerOS-SA-2026-4495)

According to the versions of the libssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated da...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-4419)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a...

Oracle Linux 8 : ovirt-engine-wildfly (ELSA-2026-500570)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500570 advisory. ovirt-engine-wildfly 24.0.1-4 - Update all bundled CXF release artifacts to 3.6.13 ovirt-engine-wildfly-overlay 24.0.1-4 - Require WildFly 24.0.1-4...

EulerOS 2.0 SP12 : sssd (EulerOS-SA-2026-4457)

According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet...

Oracle Linux 8 : gdb (ELSA-2026-73425)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-73425 advisory. 8.2-20.1.0.1 - Import gdb-8.2-20.1.el810 and forward-port Oracle changes. Reviewed-by: Jose E. Marchesi Oracle history: Thu Dec 7 2023 Cupertino Miranda -...

EulerOS 2.0 SP12 : perl-DBI (EulerOS-SA-2026-4514)

According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and...

RHEL 9 : flatpak (RHSA-2026:95064)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95064 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: flatpak:...

RHEL 9 : libX11 (RHSA-2026:95497)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95497 advisory. The libX11 packages contain the core X11 protocol client library. Security Fixes: libX11: libX11: Heap-based buffer overflow via malicious X server...

Oracle Linux 9 : delve (ELSA-2026-95518)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-95518 advisory. 1.26.1-2.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-2 - Add GOMODCACHE in check - Resolves: RHEL-289481 Tenable has...

RHEL 8 : kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_158_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 (RHSA-2026:95587)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95587 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

EulerOS 2.0 SP12 : perl-URI (EulerOS-SA-2026-4516)

According to the versions of the perl-URI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep...

FreeBSD : anki -- Malicious APKG can lead to arbitrary code execution via iframes (117b053d-d8e3-11f1-985e-901b0edee044)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 117b053d-d8e3-11f1-985e-901b0edee044 advisory. Anki developers reports: On Anki Desktop, a crafted APKG can execute an arbitrary executable after eith...

EulerOS 2.0 SP12 : systemd (EulerOS-SA-2026-4458)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed userCVE-2026-167...

Linux Distros Unpatched Vulnerability : CVE-2026-100235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization due to a time-of-check to time-of-use TOCTOU race condition in the setACL request handling of Apache ZooKeeper. When a node's ACL is...

RHEL 9 : webkit2gtk3 (RHSA-2026:95502)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95502 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in...

RHEL 9 : qt5-qtbase (RHSA-2026:95575)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95575 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

EulerOS 2.0 SP12 : samba (EulerOS-SA-2026-4531)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly...

EulerOS 2.0 SP12 : open-iscsi (EulerOS-SA-2026-4428)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow vulnerability exists in the idbmrecinfoconfig function in open-iscsi iscsi- initiator-utils. An attacker can craft a...

RockyLinux 10 : delve (RLSA-2026:95519)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95519 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multipl...

JetBrains PyCharm < 2025.3.6.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Revoked Certificate Trust

According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2025.3.6.2, or is 2026.1.x prior to 2026.1.5.1, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability. In JetBrains PyCharm before 2026.3,...

EulerOS 2.0 SP12 : coreutils (EulerOS-SA-2026-4472)

According to the versions of the coreutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150619)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150619 advisory. Unity Link Advisory UTSA-2026-150619 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

SUSE SLES12 Security Update : ghostscript (SUSE-SU-2026:5094-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5094-1 advisory. - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bsc1284397. -...

EulerOS 2.0 SP12 : libwebsockets (EulerOS-SA-2026-4499)

According to the versions of the libwebsockets packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote...

EulerOS 2.0 SP12 : lmdb (EulerOS-SA-2026-4424)

According to the versions of the lmdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the...

Linux Distros Unpatched Vulnerability : CVE-2026-115567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the...

EulerOS 2.0 SP12 : openssh (EulerOS-SA-2026-4430)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.CVE-2026-59999 sshd in...

FreeBSD : Elixir -- Mix deps.partition configuration not validated on multi-user systems (3ef78a27-f164-47ab-99b7-30c3e675d70c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3ef78a27-f164-47ab-99b7-30c3e675d70c advisory. Elixir reports: Tenable has extracted the preceding description block directly from the FreeBSD securit...

Linux Distros Unpatched Vulnerability : CVE-2026-123202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buff...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-4411)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : vt: stabilize tty reference in kbdkeycode with ttyportttygetCVE-2026-74675 udp: fix potential use-after-free in tunnel segmentationCVE-2026-74705...

RHEL 10 : delve (RHSA-2026:95519)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:95519 advisory. Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go...

JetBrains IntelliJ IDEA < 2025.3.6.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Certificate Validation (CVE-2026-118696)

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2025.3.6.2, or is 2026.1.x prior to 2026.1.5.1, or is 2026.2.x prior to 2026.2.4. It is, therefore, affected by a vulnerability: - In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2, the...

MiracleLinux 9 : delve-1.26.1-2.el9_8 (AXSA:2026-2281:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2281:03 advisory. crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-97031 crypto/x509: golang: crypto/x509:...

Rocky Linux 9.6 [TuxCare] Security Update: libpcap / libpcap-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793973527)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793973527 advisory. - libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In...

Linux Distros Unpatched Vulnerability : CVE-2026-104714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Concurrent execution using shared resource with improper synchronization 'race condition' vulnerability in Apache Struts. Where a localized message formats a da...

EulerOS 2.0 SP12 : wget (EulerOS-SA-2026-4463)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP...

EulerOS 2.0 SP12 : kata-containers (EulerOS-SA-2026-4486)

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like...

EulerOS 2.0 SP12 : libusbx (EulerOS-SA-2026-4421)

According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...

ManageEngine Password Manager Pro < Build 13236 RCE (CVE-2026-18199)

According to its self-reported build number, the ManageEngine Password Manager Pro application running on the remote host is prior to build 13236. It is, therefore, affected by an authenticated remote code execution vulnerability due to improper validation and escaping of special characters on th...

AlmaLinux 9.2 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc (ALMALINUX9.2:CLSA-2026:1793958949)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793958949 advisory. - SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITELIMITEXPRDEPTH nesting limit becau...

SUSE SLES12 Security Update : parted (SUSE-SU-2026:5090-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5090-1 advisory. - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image bsc1286017. - CVE-2026-89088: denial of service via...