Fedora 44 : valkey (2026-5aaf7130ef)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5aaf7130ef advisory. Valkey 9.0.7 - Released Mon 26 October 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Securi...

Rocky Linux 9.6 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793887401)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793887401 advisory. - SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-150417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150417 advisory. FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tlsopen of libavformat/tlsmbedtls.c, which skips hostname check...

Fedora 45 : valkey (2026-3bb241ef05)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3bb241ef05 advisory. Valkey 8.0.12 - Released Mon 26 October 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150492 advisory. The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control...

AlmaLinux 9.6 [TuxCare] Security Update: cjose / cjose-devel (ALMALINUX9.6:CLSA-2026:1793880785)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793880785 advisory. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decrypti...

Rocky Linux 9.2 [CIQ] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc Multiple Vulnerabilities (ciqsa-2026_1760)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261760 advisory. This advisory aggregates security fixes for the flatpak SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2026-96284, CVE-2026-34079, CVE-2026-96283. Tenable...

RHEL 9 : .NET 9.0 (RHSA-2026:93459)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93459 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-150497)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150497 advisory. When using a TarFile.errorlevel = 0and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the...

Rocky Linux 9.6 [CIQ] Security Update: keylime / keylime-base / keylime-registrar / keylime-selinux / etc Multiple Vulnerabilities (ciqsa-2026_1759)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261759 advisory. This advisory aggregates security fixes for the keylime SRPM in CIQ LTS 9.6. It addresses 5 CVEs: CVE-2022-3500, CVE-2023-38200, CVE-2023-3674,...

Fedora 44 : rply (2026-aa0bdade09)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-aa0bdade09 advisory. Fix for CVE-2026-115722 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

FreeBSD : security/wolfssh -- multiple vulnerabilities (61a6b109-d852-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 61a6b109-d852-11f1-bae2-3497f65b111b advisory. wolfSSL reports: Tenable has extracted the preceding description block directly from the FreeB...

Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux (ALMALINUX9.6:CLSA-2026:1793884447)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793884447 advisory. - Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker...

Unity Linux 20.1060a Security Update: dtkcore (UTSA-2026-150514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150514 advisory. libdtkcore/dconfig appid=.. :isValidAppid .. + cleanPath per-uid + savesubpath ,; Tenable has extracted the preceding description block directly from the Unity Linux...

Debian dla-4883 : libntfs-3g89 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4883 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4883-1 [email protected]...

Rocky Linux 10.2 [CIQ] Security Update: virtio-win (crlba-2026_43594)

The Rocky Linux 10.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlba-202643594 advisory. The virtio-win package provides paravirtualized network drivers for most Microsoft Windows operating systems. Paravirtualized drivers are virtualization-aware...

IBM MQ 9.2 < 9.2.0.46 LTS / 9.3 < 9.3.0.43 LTS / 9.4 < 9.4.0.30 LTS / 9.4 CD < 10.0.1.0 / 10.0 < 10.0.0.6 (7294654)

The version of IBM MQ Server running on the remote host is 9.2.0.0 prior to 9.2.0.46 LTS, or 9.3.0.0 prior to 9.3.0.43 LTS, or 9.4.0.0 prior to 9.4.0.30 LTS, or 9.4.0.0 through 9.4.5.1 CD, or 10.0.0.0 through 10.0.0.5. It is, therefore, affected by a vulnerability as referenced in the 7294654...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc (crlsa-2026_93911)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202693911 advisory. kernel: ethtool: cmis: require exact CDB reply length CVE-2026-63996 Tenable has extracted the preceding description block directly from the CIQ security...

RHEL 8 : .NET 9.0 (RHSA-2026:92427)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92427 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-150440)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150440 advisory. In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation...

Linux Distros Unpatched Vulnerability : CVE-2026-63418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Monitoring Plugins is a suite of plugins for monitoring applications. From 3.0.0-rc1 until 3.0.1, checkicmp stores the number of hosts supplied through -H or...

Linux Distros Unpatched Vulnerability : CVE-2026-119675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-100407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git- credential-wincred store operation in...

Ubuntu 26.04 LTS : Squid vulnerability (USN-8998-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8998-1 advisory. It was discovered that Squid incorrectly handled certain HTTP Transfer- Encoding headers. An attacker could possibly use this issue to perform HTTP request...

Linux Distros Unpatched Vulnerability : CVE-2026-61497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TinyUSB before 0.20.1 contains an integer underflow vulnerability in the HID host report descriptor parser tuhhidparsereportdescriptor in src/class/hid/hidhost....

SUSE SLES15: apache2 / apache2-devel / apache2-manual / apache2-prefork / etc (SUSE-SU-2026:5075-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5075-1 advisory. - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and...

Linux Distros Unpatched Vulnerability : CVE-2026-121550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main accepts an existing NNNFIFO path...

MiracleLinux 8 : xorg-x11-server-Xwayland-21.1.3-20.el8_10.5 (AXSA:2026-2260:10)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2260:10 advisory. xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling CVE-2026-93520 Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: python3-dns (crlsa-2026_94749)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202694749 advisory. dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-114605 Tenable has extracted the preceding description block...

TencentOS Server 4: java-8-konajdk (TSSA-2026:1335)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1335 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2026:5039-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5039-1 advisory. - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free...

Elasticsearch 2.x / 3.x < 3.8.6 / 4.0.x < 4.2.1 (ESA-2026-216)

The version of Elasticsearch installed on the remote host is 2.6.x prior to 3.8.6, or 4.0.x prior to 4.2.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-216 advisory. - Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise E...

openSUSE 16: libreoffice / libreoffice-base / etc (openSUSE-SU-2026:22216-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22216-1 advisory. Changes in libreoffice: - Upgrade to 26.8.1.1. - Perfect spec file sync between Factory, SLE and Leap 16.X. - Update to LibreOffice 26.2.5.1 was...

AlmaLinux 9 : dpdk (ALSA-2026:94629)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:94629 advisory. dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup CVE-2026-86561 dpdk: dpdk: Control-queue descriptor double-fetch...

Rocky Linux 8 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2026_93978)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202693978 advisory. ghostscript: Reintroduction of .charkeys -dSAFER bypass in Rocky Linux 8 CVE-2026-112177 Tenable has extracted the preceding description block directly from the CI...

Linux Distros Unpatched Vulnerability : CVE-2026-120954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when computing the number of elements describ...

Linux Distros Unpatched Vulnerability : CVE-2026-121541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793866396)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793866396 advisory. - In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors...

FreeBSD : openvox -- Flawed Hostname Check allows Puppet Client Impersonation (6cd47e21-d8db-11f1-8d43-18cf5efc6bb4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6cd47e21-d8db-11f1-8d43-18cf5efc6bb4 advisory. The OpenVoxProject reports: Trapperkeeper is the framework we use for running our Clojure based...

Fedora 43 : python3.15 (2026-5e4931d206)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5e4931d206 advisory. - Update to Python 3.15.2 - CVE 2026-114583: tar filter allows writing outside destination via empty-named symlink - CVE 2026-115557: Distrust compromised...

Rocky Linux 9 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_93469)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693469 advisory. tomcat: Apache Tomcat: Security constraint bypass due to improper access control CVE-2026-65182 tomcat: Apache Tomcat: Access control bypass due to...

SUSE SLES15 Security Update : kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:5055-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5055-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:5059-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5059-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: -...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (crlsa-2026_93414)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202693414 advisory. kernel: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Tenable has extracted the preceding description block directly from the CIQ securit...

Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_93925)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693925 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 bind: BIND: Denial of Service via unbounded processing of crafted DNS...

Rocky Linux 9 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2026_93610)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693610 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP messag...

MiracleLinux 8 : dotnet8.0-8.0.133-1.el8_10.ML.1 (AXSA:2026-2249:22)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2249:22 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privile...

Oracle Linux 9 : osbuild-composer (ELSA-2026-69293)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69293 advisory. 175-1.0.2 - Rebuild to fix CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858,...

RHEL 9 : .NET 8.0 (RHSA-2026:93456)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93456 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

TencentOS Server 4: ruby (TSSA-2026:1331)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1331 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...