SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:5091-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5091-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security...

MiracleLinux 9 : fetchmail-6.4.24-1.el9_8.1 (AXSA:2026-2265:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2265:02 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-121959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains an infinite loop vulnerability in websocketcontextread that fails to handle a zero BIO result with payload outstanding. A malicio...

Linux Distros Unpatched Vulnerability : CVE-2026-121626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Gatekeeper gnugk before 5.16 contains an out-of-bounds read vulnerability in H46024Socket::ReceivedProbePacket that allows remote attackers to cause a heap...

WordPress 7.1.0 < 7.1.4 / 7.0.0 < 7.0.8 / 6.9.0 < 6.9.11 / 6.8.0 < 6.8.12 / 6.7.0 < 6.7.11 / 6.6.0 < 6.6.11 / 6.5.0 < 6.5.14 / 6.4.0 < 6.4.14 / 6.3.0 < 6.3.14 / 6.2.0 < 6.2.15 / 6.1.0 < 6.1.16 / 6.0.0 < 6.0.18 / 5.9.0 < 5.9.20 / 5.8.0 < 5.8.19 / 5.7.0 < 5.7.21 / 5.6.0 < 5.6.23 / 5.5.0 < 5.5.24 / 5.4.0 < 5.4.25 / 5.3.0 < 5.3.27 / 5.2.0 < 5.2.30 / 5.1.0 < 5.1.28 / 5.0.0 < 5.0.31 / 4.9.0 < 4.9.35 / 4.8.0 < 4.8.34 / 4.7.0 < 4.7.39

WordPress versions 7.1.0 7.1.4 / 7.0.0 7.0.8 / 6.9.0 6.9.11 / 6.8.0 6.8.12 / 6.7.0 6.7.11 / 6.6.0 6.6.11 / 6.5.0 6.5.14 / 6.4.0 6.4.14 / 6.3.0 6.3.14 / 6.2.0 6.2.15 / 6.1.0 6.1.16 / 6.0.0 6.0.18 / 5.9.0 5.9.20 / 5.8.0 5.8.19 / 5.7.0 5.7.21 / 5.6.0 5.6.23 / 5.5.0 5.5.24 / 5.4.0 5.4.25 / 5.3.0 5.3....

Linux Distros Unpatched Vulnerability : CVE-2026-121944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sngrep through 1.9.0 contains an infinite loop vulnerability in capturepacketreasmip in src/capture.c that allows attackers to cause denial of service via craft...

Rocky Linux 9.2 [CIQ] Security Update: pmix / pmix-devel / pmix-pmi / pmix-pmi-devel / pmix-tools (ciqsa-2026_1757)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261757 advisory. This advisory aggregates security fixes for the pmix SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2023-41915. Tenable has extracted the preceding description bloc...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150432 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's...

openSUSE 16: libosmocodec-devel / libosmocodec4 / libosmocoding-devel / etc (openSUSE-SU-2026:22220-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22220-1 advisory. Changes in libosmocore: - Update to release 1.14.2 Fix buffer overflows/overreads in bssgprxpaging, parseprocessussreq, osmodecgcr, osmopbit2ubi...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150487 advisory. The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-150445)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150445 advisory. A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kafka (UTSA-2026-150468)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150468 advisory. Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration...

Linux Distros Unpatched Vulnerability : CVE-2026-119674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Database Tools mongorestore incorrectly URL-decodes an original collection name read from metadata when the corresponding dump filename has been...

Fedora 44 : ruby-build (2026-62de4e63a0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-62de4e63a0 advisory. Update to 20261023 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-121625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Gatekeeper gnugk before 5.16 contains an out-of-bounds read vulnerability in ParseRTCP in ProxyChannel.cxx that allows remote RTP peers to read heap memory...

Linux Distros Unpatched Vulnerability : CVE-2026-61495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtpcontainergetstring in...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:22228-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22228-1 advisory. Changes in hauler: - update vendor.tar to address: bsc1288460, CVE-2026-116591, github.com/klauspost/compress/zstd: crafted 27 KB two-block zstd frame...

Elasticsearch 1.x / 3.x < 3.8.6 / 4.0.x < 4.2.1 (ESA-2026-215)

The version of Elasticsearch installed on the remote host is 1.x prior to 3.8.6, or 4.0.x prior to 4.2.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-215 advisory. - Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise ECE...

SUSE SLED15 / SLES15 Security Update : guava, j2objc-annotations (SUSE-SU-2026:5061-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5061-1 advisory. This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_93930)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693930 advisory. kernel: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES CVE-2026-63987 kernel: ethtool: cmis: require exact CDB reply length...

TencentOS Server 4: python-oauthlib (TSSA-2026:1328)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1328 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freeipmi (UTSA-2026-150473)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150473 advisory. ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcipv6info in ipmi-oem/ipmi-oem-dell.c cmc-ipv6-info subcommand to dell...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kafka (UTSA-2026-150458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150458 advisory. Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses information in the DEBU...

Linux Distros Unpatched Vulnerability : CVE-2026-118514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Symfony http-foundation prior to versions 5.4.56, 6.4.50, 7.4.23, and 8.1.11, Symfony\Component\HttpFoundation\RequestMatcher, and...

Oracle Linux 9 : tesseract (ELSA-2026-95086)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-95086 advisory. - Fix incomplete CVE-2026-88051: reset 'sizeused' on validation failure in 'GenericVector::read'; check 'fontinfotable' and 'fontsettable' read return...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150500)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150500 advisory. The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control...

Fedora 44 : openbao (2026-d255ce2e09)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d255ce2e09 advisory. Update to upstream 2.6.5 which includes a number of security fixes, see https://github.com/openbao/openbao/releases/v2.6.5. Also fixes golang CVE-2026-111943...

RHEL 9 : .NET 8.0 (RHSA-2026:93457)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93457 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-150456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150456 advisory. A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup3x3 of the file libavfilter/vfconvolution.c...

SUSE SLED15: gvfs / gvfs-backend-afc / gvfs-backend-samba / gvfs-backends / etc (SUSE-SU-2026:5065-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5065-1 advisory. This update for gvfs fixes the following issue: - CVE-2026-88924: gvfs-admin socket ownership race condition allows loc...

Fedora 45 : scribus (2026-837d6477fa)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-837d6477fa advisory. 1.6.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but ha...

MiracleLinux 8 : python-dns-1.15.0-13.el8_10 (AXSA:2026-2258:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2258:01 advisory. dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-114605 Tenable has extracted the preceding description block...

openSUSE 16: crane / crane-bash-completion / crane-fish-completion / etc (openSUSE-SU-2026:22227-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22227-1 advisory. Changes in go-containerregistry: - update vendor.tar to address: bsc1288488, CVE-2026-116591: github.com/klauspost/compress/zstd: crafted 27 KB...

MiracleLinux 8 : qt5-qtbase-5.15.3-10.el8_10 (AXSA:2026-2250:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2250:04 advisory. qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization CVE-2026-11573 qt5-qtbase: qt6-qtbase: Qt:...

Linux Distros Unpatched Vulnerability : CVE-2026-121373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2026-48761, sanitizes the refresh URL of content attributes of meta tag...

openSUSE 16 Security Update : rqlite (openSUSE-SU-2026:22224-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22224-1 advisory. Changes in rqlite: - Update to version 10.6.6: Keep the local auto-backup file if the metadata rename fails Reject local auto-backup filenames...

RHEL 8 : .NET 8.0 (RHSA-2026:92420)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92420 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

RHEL 10 : .NET 8.0 (RHSA-2026:93455)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93455 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

SUSE SLES15 Security Update : kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:5055-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5055-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: -...

TencentOS Server 4: ruby (TSSA-2026:1331)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1331 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-121505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the NTS-KE client response parser ntsclientprocessresponsecore in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: NetworkManager (UTSA-2026-150505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150505 advisory. A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer...

AlmaLinux 8 : gimp:2.8 (ALSA-2026:95482)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:95482 advisory. gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader loadresource1033 CVE-2026-112257 Bug Fixes and Enhancements: gimp: xpm poc file for CVE-2026-415...

RHEL 10 : .NET 10.0 (RHSA-2026:92438)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92438 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly...

MiracleLinux 9 : dpdk-25.11-2.el9_8 (AXSA:2026-2256:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2256:03 advisory. dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup CVE-2026-86561 dpdk: dpdk: Control-queue descriptor double-fetch...

SUSE SLES15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2026:5079-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5079-1 advisory. - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a...

Linux Distros Unpatched Vulnerability : CVE-2026-93325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under...

SUSE SLES15 Security Update : kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:5059-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5059-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: -...

Rocky Linux 9.6 [TuxCare] Security Update: cjose / cjose-devel (ALMALINUX9.6:CLSA-2026:1793880785)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793880785 advisory. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE...

TencentOS Server 4: etcd (TSSA-2026:1326)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1326 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...