Linux Distros Unpatched Vulnerability : CVE-2026-58177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from...

Linux Distros Unpatched Vulnerability : CVE-2026-58222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing...

Linux Distros Unpatched Vulnerability : CVE-2026-58159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 throu...

Linux Distros Unpatched Vulnerability : CVE-2026-58189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects Apache Traffic Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-58158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through...

Linux Distros Unpatched Vulnerability : CVE-2026-58150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue affects Apache Traffic Server: from...

Linux Distros Unpatched Vulnerability : CVE-2026-58155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling, and policy bypass. This issue affects Apache Traffic Server...

NewStart CGSL MAIN 6.06 : docker-image-check Multiple Vulnerabilities (NS-SA-2026-0055)

The remote NewStart CGSL host, running version MAIN 6.06, has docker-image-check packages installed that are affected by multiple vulnerabilities: - net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications...

NewStart CGSL MAIN 6.06 : ipv6nat-selinux Multiple Vulnerabilities (NS-SA-2026-0054)

The remote NewStart CGSL host, running version MAIN 6.06, has ipv6nat-selinux packages installed that are affected by multiple vulnerabilities: - net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This...

NewStart CGSL MAIN 6.06 : ghostscript Multiple Vulnerabilities (NS-SA-2026-0055)

The remote NewStart CGSL host, running version MAIN 6.06, has ghostscript packages installed that are affected by multiple vulnerabilities: - A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This...

NewStart CGSL MAIN 6.06 : cups-filters Multiple Vulnerabilities (NS-SA-2026-0051)

The remote NewStart CGSL host, running version MAIN 6.06, has cups-filters packages installed that are affected by multiple vulnerabilities: - CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to,...

Linux Distros Unpatched Vulnerability : CVE-2026-50736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the...

TencentOS Server 3: python39:3.9 and python39-devel:3.9 (TSSA-2024:1161)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1161 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-33930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound during redirect handling, so an over-long Host header overflo...

Linux Distros Unpatched Vulnerability : CVE-2026-55554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after...

openSUSE 16: go1.21 / go1.21-race / go1.22 / go1.22-openssl / etc (openSUSE-SU-2026:21447-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21447-1 advisory. Changes in go compilers: - Switch from update-alternatives to new method. - Packaging improvements: Revert %ghost /usr/bin/go /usr/bin/gofmt which...

Linux Distros Unpatched Vulnerability : CVE-2026-62424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SU...

Fedora 45 : isns-utils (2026-c1c3dda3cd)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c1c3dda3cd advisory. Automatic update for isns-utils-0.103-8.fc45. Changelog Wed Jul 29 2026 Chris Leech - 0.103-8 - CVE-2026-55995: Denial of Service via double-free in iSNS...

Linux Distros Unpatched Vulnerability : CVE-2026-62433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a...

Linux Distros Unpatched Vulnerability : CVE-2026-65325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects...

Google Chrome < 151.0.7922.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 151.0.7922.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202607stable-channel-update-for-desktop0887107924 advisory. - Use after free in Dawn. CVE-2026-18017 - Use after free in Compositi...

TencentOS Server 4: frr (TSSA-2026:0761)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0761 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-59943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, if a malicious actor can supply unrestricted content for rendering by Dompdf they can...

Linux Distros Unpatched Vulnerability : CVE-2026-67217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in applypatch in cJSONUtils.c. For a replace operation that is missing its value...

MiracleLinux 9 : nginx-1.20.1-28.el9_8.3.ML.1 (AXSA:2026-1385:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1385:05 advisory. nginx: ngxhttprewritemodule: code execution and denial of service CVE-2026-9256 Tenable has extracted the preceding description block directly from the...

Rockwell Automation ControlLogix, CompactLogix, GuardLogix, and 1756-EN4TR Improper Check for Certificate Revocation (CVE-2026-9636)

The affected products fail to properly reject certificates signed by an intermediate certificate authority that has been revoked via a Certificate Revocation List CRL. A network-based attacker who holds such a certificate can leverage it to establish a Common Industrial Protocol CIP Security...

Oracle Solaris Critical Patch Update : jul2026_SRU11_4_94_221_2

The version of Solaris installed on the remote host is prior to 11.4.94.221.2. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11jul2026SRU114942212 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystems. The supported...

Linux Distros Unpatched Vulnerability : CVE-2026-16729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9....

Fedora 45 : docker-buildx (2026-c37317fdde)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c37317fdde advisory. Automatic update for docker-buildx-0.36.0-1.fc45. Changelog Wed Jul 29 2026 Bradley G Smith - 0.36.0-1 - Update to release v0.36.0 - Resolves:...

Linux Distros Unpatched Vulnerability : CVE-2026-59900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation...

RockyLinux 9 : plexus-utils (RLSA-2026:38796)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:38796 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...

SUSE SLED15: apache-commons-compress / apache-commons-lang3 / beust-jcommander / etc (SUSE-SU-2026:3390-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3390-1 advisory. apache-commons-lang3 was updated to 3.20.0: New features: - Add SystemProperties.getPathString, Supplier - Add...

openSUSE 16 Security Update : perl-Mojolicious (openSUSE-SU-2026:21451-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21451-1 advisory. Changes in perl-Mojolicious: - updated to 9.480.0 9.48 - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now mask...

TencentOS Server 4: python-urwid (TSSA-2026:0729)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0729 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3336-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3336-1 advisory. This update for ImageMagick fixes the following issue: - Extend CVE-2026-56379 patch by f63c78b bsc1268878. Tenable has...

FreeBSD : GoLand -- Multiple vulnerabilities (35a830f6-8aab-11f1-a744-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 35a830f6-8aab-11f1-a744-b42e991fc52e advisory. https://www.jetbrains.com/privacy-security/issues-fixed/ reports: Tenable has extracted the preceding...

SUSE SLES12: ImageMagick-config-6-SUSE / ImageMagick-config-6-upstream / etc (SUSE-SU-2026:3298-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3298-1 advisory. This update for ImageMagick fixes the following issue - Extend CVE-2026-56379 patch by f63c78b bsc1268878. Tenable has extracted the preceding...

Oracle Linux 10 : libXfont2 (ELSA-2026-47079)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47079 advisory. 2.0.6-5.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191882 Resolves:...

Linux Distros Unpatched Vulnerability : CVE-2026-64645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites or redirects ru...

SUSE SLED15: java-21-openjdk / java-21-openjdk-demo / java-21-openjdk-devel / etc (SUSE-SU-2026:3332-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3332-1 advisory. Update to upstream tag jdk-21.0.12+8 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information...

RockyLinux 10 : pipewire (RLSA-2026:47083)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47083 advisory. pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 Tenable has extracted the preceding description bloc...

NewStart CGSL MAIN 6.06 : gmp Vulnerability (NS-SA-2026-0061)

The remote NewStart CGSL host, running version MAIN 6.06, has gmp packages installed that are affected by a vulnerability: - GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation...

Linux Distros Unpatched Vulnerability : CVE-2026-55995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through...

Linux Distros Unpatched Vulnerability : CVE-2026-59986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - librabbitmq - None Ubuntu Linux - Unknown description CVE-2026-59986 Note that Nessus relies on the presence of the package as reported by the...

RockyLinux 10 : libXfont2 (RLSA-2026:47079)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47079 advisory. libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 libXfont2: PCF Font Parsing Heap Buffer Overflow CVE-2026-56002...

NewStart CGSL MAIN 6.06 : bind Multiple Vulnerabilities (NS-SA-2026-0057)

The remote NewStart CGSL host, running version MAIN 6.06, has bind packages installed that are affected by multiple vulnerabilities: - There is a logic error in iouring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation. In the...

TencentOS Server 4: tomcat (TSSA-2026:0738)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0738 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-61547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - librabbitmq - None Ubuntu Linux - Unknown description CVE-2026-61547 Note that Nessus relies on the presence of the package as reported by the...

SUSE SLES15 Security Update : nginx (SUSE-SU-2026:3329-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3329-1 advisory. This update for nginx fixes the following issues - CVE-2026-42055: heap-based buffer overflow in the ngxhttpproxyv2module and...

RHEL 10 : container-selinux and crun (RHSA-2026:47905)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47905 advisory. The container-selinux package provides SELinux policies for container runtimes. Security Fixes: crun: crun: Privilege escalation due to incorrect...