RHEL 9 : .NET 8.0 (RHSA-2026:92492)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92492 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

Linux Distros Unpatched Vulnerability : CVE-2026-121506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP...

Fedora 45 : forgejo (2026-53eede68af)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-53eede68af advisory. This is an upstream release fixing security issues and other bugs. Tenable has extracted the preceding description block directly from the Fedora security...

SUSE SLED15: nv-prefer-signed-open-driver-G07 / etc (SUSE-SU-2026:5097-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5097-1 advisory. - Update non-CUDA variant to 595.112.07 bsc1286763. - Fix build against renamed -nvidia64kb flavor bsc1282794....

Fedora 43 : python3.11 (2026-30d5bd99e3)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-30d5bd99e3 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 43 : python3.13 (2026-d6b8383232)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d6b8383232 advisory. New version of the Python interpreter ---- New version of Python 3.13. There are no significant changes. Tenable has extracted the preceding...

AlmaLinux 9.2 [TuxCare] Security Update: cjose / cjose-devel (ALMALINUX9.2:CLSA-2026:1793880537)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793880537 advisory. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decrypti...

Fedora 45 : roundcubemail (2026-7002464a52)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7002464a52 advisory. Version 1.7.5 - Installer: Add possibility to detsroy the installer session/cookie - Enigma: Fix dbsync never restoring keyring files 10343 -...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793786843)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793786843 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmiencdec: Restrict string length in decode The QMI...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793866396)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793866396 advisory. - In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors...

Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8959-1)

"The remote Ubuntu 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8959-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dlnfs (UTSA-2026-150459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150459 advisory. DDEdlnfsTOCTOUrootMountCo ntrol.Mountroot-- basedlnfsFDroot chmodroot/etc/crontabroot Tenable has extracted the preceding description block directly from the Unity...

Fedora 44 : rust-redlib (2026-ab2b8fc1e8)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ab2b8fc1e8 advisory. Rebuilt with rustls-webpki 0.103.16 for RUSTSEC-2026-0382. This provides added protection against trusting the eMudhra intermediate CA certificates, which...

Fedora 44 : python-lxml-html-clean (2026-d470ba3df9)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d470ba3df9 advisory. Fixes three high severity ReDOS flaws. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Rocky Linux 8 [CIQ] Security Update: perl-YAML Multiple Vulnerabilities (crlsa-2026_93471)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693471 advisory. perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment CVE-2019-25777 perl-yaml: perl-yaml: Arbitrary destructor meth...

Linux Distros Unpatched Vulnerability : CVE-2026-121950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 does not check the product of surface dimensions in gdiCreateSurface when handling an RDPGFX CREATESURFACE PDU, causing an integer wrap an...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: dlnfs (UTSA-2026-150478)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150478 advisory. DDEdlnfsTOCTOUrootMountCo ntrol.Mountroot-- basedlnfsFDroot chmodroot/etc/crontabroot Tenable has extracted the preceding description block directly from the Unity...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freeipmi (UTSA-2026-150475)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150475 advisory. ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcinfo in ipmi-oem/ipmi-oem-dell.c cmc-info subcommand to dell...

Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2026-95281)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-95281 advisory. 21.1.3-20.5 - Add missing antecedent for CVE-2026-93520 fix Resolves: https://redhat.atlassian.net/browse/RHEL-299853 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-122132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows attackers to redirect victims to external...

Rocky Linux 8 [CIQ] Security Update: wireshark / wireshark-cli / wireshark-cli-debuginfo / etc (crlsa-2026_93627)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202693627 advisory. wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector CVE-2026-95387 Tenable has extracted the preceding description block...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150480)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150480 advisory. Allows modifying some file metadata e.g. last modified with filter=dataor file permissions chmod with filter=tarof files outside the extraction directory. You are...

Linux Distros Unpatched Vulnerability : CVE-2026-121942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZBar through 0.23.95 contains an out-of-bounds read vulnerability in zbarsqdecode in zbar/sqcode.c that allows attackers to read heap memory outside the image...

Linux Distros Unpatched Vulnerability : CVE-2026-121952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because rdpreadbitmapcachev2capabilityset rejects only numCellCaches values above 5, yet the bitma...

Linux Distros Unpatched Vulnerability : CVE-2026-121627

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script via an...

CentOS Linux 8 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1793879941)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1793879941 advisory. - SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITELIMITEXPRDEPTH limit b...

Fedora 45 : 3proxy (2026-1f4dd1b9ff)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1f4dd1b9ff advisory. Update to 1.0.2 rhbz2560278 ---- Patch CVE-2026-109438 rhbz2553107, rhbz2553106 Tenable has extracted the preceding description block directly from the Fedor...

AlmaLinux 9.6 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793887401)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793887401 advisory. - SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memor...

Linux Distros Unpatched Vulnerability : CVE-2026-121995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150494 advisory. When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150488 advisory. Allows arbitrary filesystem writes outside the extraction directory during extraction with filter=data. You are affected by this vulnerability if using the...

Oracle Linux 7 : gvfs (ELSA-2026-86606)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-86606 advisory. 1.36.2-7.0.1 - Backport fix for CVE-2026-84268 Orabug: 40186814 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150438 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a mapdirective uses regex matching and a string expression references the map's regex capture variabl...

SUSE SLES15 Security Update : kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:5058-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5058-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: -...

Linux Distros Unpatched Vulnerability : CVE-2026-121958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX client because the deletesurface callback truncates surface hash keys to 16 bits, leaving th...

Rocky Linux 10.2 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (crlsa-2026_94501)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202694501 advisory. pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance CVE-2026-102266 pyjwt: PyJWT: Authentication bypass via improper public key validatio...

Rocky Linux 10.2 [CIQ] Security Update: libXi / libXi-debuginfo / libXi-debugsource / libXi-devel Multiple Vulnerabilities (crlsa-2026_93441)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693441 advisory. libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION...

Oracle Linux 10 : cockpit-files (ELSA-2026-95570)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-95570 advisory. - Fix CVE-2026-91202 - Don't de-reference a symlink when pasting RHEL-263140 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150496 advisory. The email module, specifically the BytesGenerator class, didnt properly quote newlines for email headers when serializing an email message allowing for header...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: curl (UTSA-2026-150464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150464 advisory. libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps...

Linux Distros Unpatched Vulnerability : CVE-2026-121943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on...

Linux Distros Unpatched Vulnerability : CVE-2026-118513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authentication bypass by spoofing in X509Authenticator and X509AuthenticationListener of Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x prior to...

RHEL 10 : .NET 9.0 (RHSA-2026:92430)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92430 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly...

RHEL 10 : .NET 8.0 (RHSA-2026:92428)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92428 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

Linux Distros Unpatched Vulnerability : CVE-2026-121559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulnerability that allows authenticated users to obtain elevated profiles b...

Fedora 44 : python-crate-ingredients (2026-29236f6dd2)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-29236f6dd2 advisory. Rebuilt with webpki-roots 1.0.11 removed emSign Root CA - C1/C3 This provides added protection against trusting compromised certificates. Tenable has extract...

MiracleLinux 9 : dotnet10.0-10.0.114-1.el9_8.ML.1 (AXSA:2026-2248:24)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2248:24 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Tenable has extracted the preceding descripti...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kafka (UTSA-2026-150460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150460 advisory. Some components in Apache Kafka use Arrays.equals to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such...

Unity Linux 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150435 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return...

SUSE SLES15 Security Update : kernel (Live Patch 59 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:5084-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5084-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.240 fixes various security issues: The following security issues were fixed:...