Linux Distros Unpatched Vulnerability : CVE-2025-63913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function 2 or the 'Find and configure a...

RockyLinux 8 : perl-IO-Compress (RLSA-2026:30858)

The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:30858 advisory. perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob CVE-2026-48962 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-59942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service DoS attack via resource exhaustion. An attacker can...

Linux Distros Unpatched Vulnerability : CVE-2026-56821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags...

Linux Distros Unpatched Vulnerability : CVE-2026-58185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache Traffic Server intercept plugin has a use-after-free. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14,...

SUSE SLES12 Security Update : nmap (SUSE-SU-2026:3333-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3333-1 advisory. This update for nmap fixes the following issue - CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds read...

NewStart CGSL MAIN 6.06 : kernel Multiple Vulnerabilities (NS-SA-2026-0063)

The remote NewStart CGSL host, running version MAIN 6.06, has kernel packages installed that are affected by multiple vulnerabilities: - BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra...

Fedora 43 : wordpress (2026-46346e9637)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-46346e9637 advisory. Version 6.9.5 Security updates - A facilitated SQL injection issue - A REST API batch-route confusion and SQL injection issue leading to Remote Code Executio...

TencentOS Server 4: liborc (TSSA-2026:0742)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0742 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

FreeBSD : Mozilla -- Memory safety bugs (aca6684f-8aa2-11f1-a744-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aca6684f-8aa2-11f1-a744-b42e991fc52e advisory. https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/CVE-2026-16411 reports Memory safety bugs...

Linux Distros Unpatched Vulnerability : CVE-2026-66746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding...

Linux Distros Unpatched Vulnerability : CVE-2026-67216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSONCompare. When comparing objects, the function recurses into each shared subtree...

MiracleLinux 8 : kernel-4.18.0-553.146.1.el8_10 (AXSA:2026-1384:55)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1384:55 advisory. kernel: RDMA/mana: Remove user triggerable WARNON in manaibcreateqprss CVE-2026-46117 kernel: Bluetooth: l2cap: Add missing chan lock in...

TencentOS Server 2: tigervnc (TSSA-2026:0782)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0782 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-42493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly...

Linux Distros Unpatched Vulnerability : CVE-2026-62428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy...

SUSE SLES12 Security Update : libssh (SUSE-SU-2026:3302-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3302-1 advisory. This update for libssh fixes the following issues - CVE-2026-3731: denial of service via out-of-bounds read in SFTP extension name handler...

SUSE SLES16: java-17-openjdk / java-17-openjdk-demo / java-17-openjdk-devel / etc (SUSE-SU-2026:22944-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22944-1 advisory. This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 July 2026 CPU - CVE-2026-41254:...

Oracle Linux 9 : libXfont2 (ELSA-2026-47084)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47084 advisory. 2.0.3-12.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191886 Resolves:...

Oracle Linux 8 : libtiff (ELSA-2026-47184)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47184 advisory. 4.0.9-38 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 RHEL-189371 Tenable has extracted the preceding description block...

SUSE SLES12: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2026:3299-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3299-1 advisory. - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser bsc1268971. - CVE-2026-52720: invalid check of total area...

Oracle Linux 9 : gstreamer1-plugins-bad-free (ELSA-2026-47179)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47179 advisory. - Fix incorrect bytes-per-pixel handling in rfbsrc plugin CVE-2026-59691 Resolves: RHEL-193557 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-62423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SU...

Linux Distros Unpatched Vulnerability : CVE-2026-62434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management...

Linux Distros Unpatched Vulnerability : CVE-2026-62426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To manage the system, sysctl and...

Linux Distros Unpatched Vulnerability : CVE-2026-62429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration informati...

SUSE SLES16 Security Update : libssh (SUSE-SU-2026:22956-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22956-1 advisory. - CVE-2026-15370: stack buffer overflow in SFTP server longname construction bsc1272162. - CVE-2026-59843: denial of service via...

RHEL 8 : kernel (RHSA-2026:47869)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47869 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86: Don't recheck L1...

Oracle Linux 10 : gstreamer1-plugins-bad-free (ELSA-2026-47180)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47180 advisory. 1.26.7-2.5 - Fix rfbsrc hextile and color read handling for non-32bpp pixel formats CVE-2026-59691 Resolves: RHEL-193550 Tenable has extracted the...

Oracle Linux 10 : pipewire (ELSA-2026-47083)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47083 advisory. - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

NewStart CGSL MAIN 6.06 : kata-runtime-neo Vulnerability (NS-SA-2026-0064)

The remote NewStart CGSL host, running version MAIN 6.06, has kata-runtime-neo packages installed that are affected by a vulnerability: - A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to creat...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21453-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21453-1 advisory. Changes in chromium: - Chromium 150.0.7871.186 boo1272460: CVE-2026-16807: Out of bounds write in Codecs CVE-2026-16806: Use after free in WebMC...

RockyLinux 10 : rest (RLSA-2026:47085)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47085 advisory. librest: weak random number generation in PKCE implementation CVE-2026-16615 Tenable has extracted the preceding description block directly from the RockyLinux...

Linux Distros Unpatched Vulnerability : CVE-2026-52791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in...

Linux Distros Unpatched Vulnerability : CVE-2026-58177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from...

Rockwell Automation Micro850/870 Uncontrolled Resource Consumption (CVE-2024-7567)

A denial-of-service vulnerability exists via the CIP/Modbus port in Micro850/870. If exploited, the CIP/Modbus communication may be disrupted for a short duration. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Linux Distros Unpatched Vulnerability : CVE-2026-67214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functio...

NewStart CGSL MAIN 6.06 : gstreamer1-plugins-good Vulnerability (NS-SA-2026-0052)

The remote NewStart CGSL host, running version MAIN 6.06, has gstreamer1-plugins-good packages installed that are affected by a vulnerability: - GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function...

NewStart CGSL MAIN 6.06 : gstreamer1-plugins-bad-free Vulnerability (NS-SA-2026-0051)

The remote NewStart CGSL host, running version MAIN 6.06, has gstreamer1-plugins-bad-free packages installed that are affected by a vulnerability: - GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...

Linux Distros Unpatched Vulnerability : CVE-2026-64643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using...

Linux Distros Unpatched Vulnerability : CVE-2026-56390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Bison improperly handles grammardefined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without...

Linux Distros Unpatched Vulnerability : CVE-2026-56722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, aAn attacker who controls the HTML input can bypass this restriction by embedding a targ...

RHEL 10 : mariadb-connector-c (RHSA-2026:47772)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47772 advisory. The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes:...

Fedora 43 : gpsd (2026-d61fcb86ed)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d61fcb86ed advisory. Security fix for CVE-2026-58459 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-66752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tiny-http through 0.12.0 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize request framing by sending a...

NewStart CGSL MAIN 6.06 : grub2 Vulnerability (NS-SA-2026-0058)

The remote NewStart CGSL host, running version MAIN 6.06, has grub2 packages installed that are affected by a vulnerability: - When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As...

Linux Distros Unpatched Vulnerability : CVE-2026-64648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a...

Linux Distros Unpatched Vulnerability : CVE-2026-64559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/pkey: Check length in PKEYVERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer...

TencentOS Server 4: python-pillow (TSSA-2026:0728)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0728 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

RHEL 9 : kpatch-patch (RHSA-2026:47983)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47983 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...