EulerOS Virtualization 2.15.1 : libtasn1 (EulerOS-SA-2026-4563)

According to the versions of the libtasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a...

EulerOS Virtualization 2.15.0 : libxslt (EulerOS-SA-2026-4607)

According to the versions of the libxslt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers an...

Rocky Linux 8 [CIQ] Security Update: qt5-qtsvg / qt5-qtsvg-debuginfo / qt5-qtsvg-debugsource / etc (crlsa-2023_6961)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20236961 advisory. qt: Uninitialized variable usage in munitsPerEm CVE-2023-32573 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

EulerOS Virtualization 2.15.0 : python-setuptools (EulerOS-SA-2026-4847)

According to the versions of the python-setuptools packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path...

Linux Distros Unpatched Vulnerability : CVE-2026-72813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to...

EulerOS Virtualization 2.15.0 : qemu (EulerOS-SA-2026-4625)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the...

EulerOS Virtualization 2.15.1 : net-snmp (EulerOS-SA-2026-4566)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an...

EulerOS Virtualization 2.15.1 : libusbx (EulerOS-SA-2026-4766)

According to the versions of the libusbx package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by...

EulerOS Virtualization 2.15.1 : pam (EulerOS-SA-2026-4775)

According to the versions of the pam packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path...

EulerOS Virtualization 2.15.1 : perl-Socket (EulerOS-SA-2026-4782)

According to the versions of the perl-Socket package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read.In Socket.xs, packipmreqsource checks the length of its...

EulerOS Virtualization 2.15.0 : perl-Socket (EulerOS-SA-2026-4841)

According to the versions of the perl-Socket package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read.In Socket.xs, packipmreqsource checks the length of its...

EulerOS Virtualization 2.15.1 : gnupg2 (EulerOS-SA-2026-4554)

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an...

EulerOS Virtualization 2.15.0 : sqlite (EulerOS-SA-2026-4855)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53...

Fedora 45 : nginx / nginx-mod-brotli / nginx-mod-fancyindex / etc (2026-7e0167d39a)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-7e0167d39a advisory. nginx-mod-headers-more: - Rebuild for 1.30.6 nginx-mod-brotli: - Rebuild for 1.30.6 nginx-mod-js-challenge: - Rebuild for 1.30.6 nginx-mod-fancyinde...

Linux Distros Unpatched Vulnerability : CVE-2026-97371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpigetcustomcategorymatch writes a four-byte nDPI protocol-category value...

EulerOS Virtualization 2.15.1 : libtiff (EulerOS-SA-2026-4650)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the...

EulerOS Virtualization 2.15.0 : samba (EulerOS-SA-2026-4853)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto- enrollment is enabled, Samba m...

Linux Distros Unpatched Vulnerability : CVE-2026-68984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. CVE-2026-68984 Note that Nessus...

Fedora 43 : goose (2026-8121b4b9af)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8121b4b9af advisory. Update to goose-1.45.0-2.fc43. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

EulerOS Virtualization 2.15.0 : python-lxml (EulerOS-SA-2026-4721)

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the...

Rocky Linux 10.2 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource Multiple Vulnerabilities (crlsa-2026_95519)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695519 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multipl...

EulerOS Virtualization 2.15.0 : vim (EulerOS-SA-2026-4738)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob...

EulerOS Virtualization 2.15.1 : python-filelock (EulerOS-SA-2026-4570)

According to the versions of the python-filelock package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability...

EulerOS Virtualization 2.15.1 : curl (EulerOS-SA-2026-4547)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When doing TLS related transfers with reused easy or multi handles and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl could...

EulerOS Virtualization 2.15.0 : edk2 (EulerOS-SA-2026-4802)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...

Linux Distros Unpatched Vulnerability : CVE-2026-82413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, scripts/lua/rest/v2/add/host/toscan.lua and...

EulerOS Virtualization 2.15.1 : binutils (EulerOS-SA-2026-4546)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort SIGABRT when processing a crafted ELF binary with...

EulerOS Virtualization 2.15.0 : libtasn1 (EulerOS-SA-2026-4605)

According to the versions of the libtasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a...

EulerOS Virtualization 2.15.1 : mesa (EulerOS-SA-2026-4653)

According to the versions of the mesa package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data...

EulerOS Virtualization 2.15.1 : grub2 (EulerOS-SA-2026-4556)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closin...

Linux Distros Unpatched Vulnerability : CVE-2026-111062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - russh is a Rust SSH client and server library. From version 0.34.0-beta.1 until version 0.64.0, its SSH server does not require the signature algorithm in a...

EulerOS Virtualization 2.15.1 : freetype (EulerOS-SA-2026-4550)

According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An integer overflow in the ttvarloaditemvariationstore function of the Freetype library in versions 2.13.2 and 2.13.3 may allow fo...

EulerOS Virtualization 2.15.0 : libarchive (EulerOS-SA-2026-4821)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...

EulerOS Virtualization 2.15.0 : radvd (EulerOS-SA-2026-4851)

According to the versions of the radvd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buff...

EulerOS Virtualization 2.15.1 : dhcp (EulerOS-SA-2026-4548)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into...

Linux Distros Unpatched Vulnerability : CVE-2026-77063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the fileSize limit, a race...

EulerOS Virtualization 2.15.0 : glib2 (EulerOS-SA-2026-4594)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an...

EulerOS Virtualization 2.15.0 : httpd (EulerOS-SA-2026-4697)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a...

EulerOS Virtualization 2.15.1 : libsodium (EulerOS-SA-2026-4561)

According to the versions of the libsodium package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...

EulerOS Virtualization 2.15.1 : perl-HTTP-Tiny (EulerOS-SA-2026-4659)

According to the versions of the perl-HTTP-Tiny package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.The...

EulerOS Virtualization 2.15.0 : util-linux (EulerOS-SA-2026-4858)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and...

EulerOS Virtualization 2.15.1 : bind (EulerOS-SA-2026-4628)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

EulerOS Virtualization 2.15.0 : python-urllib3 (EulerOS-SA-2026-4616)

According to the versions of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP...

Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_95618)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695618 advisory. glibc: nscd stack overflow leads to degraded DNS resolution CVE-2026-89092 glibc: glibc DNS stub resolver: Denial of Service via long search domain in...

EulerOS Virtualization 2.15.0 : patch (EulerOS-SA-2026-4835)

According to the versions of the patch package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling ...

EulerOS Virtualization 2.15.1 : edk2 (EulerOS-SA-2026-4743)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...

EulerOS Virtualization 2.15.1 : perl-HTTP-Tiny (EulerOS-SA-2026-4780)

According to the versions of the perl-HTTP-Tiny package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets.When the server return...

EulerOS Virtualization 2.15.1 : libvirt (EulerOS-SA-2026-4684)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it...

Rocky Linux 8.6 [CIQ] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ciqsa-2026_1763)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261763 advisory. This advisory aggregates security fixes for the vim SRPM in CIQ LTS 8.6. It addresses 22 CVEs: CVE-2026-33412, CVE-2026-55892, CVE-2026-59858,...

EulerOS Virtualization 2.15.1 : shim (EulerOS-SA-2026-4795)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...