RockyLinux 8 : kernel (RLSA-2026:70402)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70402 advisory. kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: Linux kernel Bluetooth: Denial of Service via race condition i...

PHP 8.2.x < 8.2.34 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.2.34. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.34 advisory. - Debian Linux - php8.2 - None php8.4 - None CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766,...

RHEL 10 : kernel (RHSA-2026:71602)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71602 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fbcon: Set fbdisplayi-mode t...

Linux Distros Unpatched Vulnerability : CVE-2026-81884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LCDATAINCODE parser was vulnerable because the...

Linux Distros Unpatched Vulnerability : CVE-2026-81886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable...

Linux Distros Unpatched Vulnerability : CVE-2026-81885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because...

Linux Distros Unpatched Vulnerability : CVE-2026-73581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses...

Linux Distros Unpatched Vulnerability : CVE-2026-86247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some...

Linux Distros Unpatched Vulnerability : CVE-2026-93543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client. CVE-2026-93543 Note...

RHEL 6 : kernel (RHSA-2026:71649)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71649 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: PPPoE memory...

Fedora 44 : znc / znc-clientbuffer (2026-855d5949d1)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-855d5949d1 advisory. Update to 1.10.3 Fix CVE-2026-82373, CVE-2026-82374, CVE-2020-11022, CVE-2020-11023 Tenable has extracted the preceding description block directly...

RHEL 8 : kernel (RHSA-2026:71329)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71329 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdgpu: Fix fence put...

Linux Distros Unpatched Vulnerability : CVE-2026-66068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOGDEBUGshutting down Shovel 'ts', ... Shovel state:...

RHEL 9 : tesseract (RHSA-2026:71567)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:71567 advisory. A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNLV. It was...

RHEL 9 : glib2 (RHSA-2026:71403)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:71403 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, th...

Linux Distros Unpatched Vulnerability : CVE-2026-88384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with...

MiracleLinux 8 : postgresql:16 (AXSA:2026-1909:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1909:01 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL:...

SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2026:4309-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4309-1 advisory. Security issues fixed: - CVE-2026-59088: denial of service via signed integer overflow in FLI file processing...

Fortinet FortiAnalyzer Uncontrolled Resource Consumption in SNMP (FG-IR-26-172)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-172 advisory. - A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denia...

Fedora 43 : kernel (2026-0a8e95dad5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0a8e95dad5 advisory. The 7.2.5 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

RHEL 9 : rrdtool (RHSA-2026:71600)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:71600 advisory. The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:71648)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71648 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124493 advisory. The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU time of check/time of...

Fedora 43 : pcs (2026-96efddc493)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-96efddc493 advisory. - Rebased pcs to the newest major version see CHANGELOG.md - includes fix for CVE-2026-84828 - Updated standalone web UI and HA Cluster Management Cockpit...

Fedora 43 : mongo-c-driver (2026-f74926c622)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f74926c622 advisory. libmongoc 1.30.9 Fixes - Fix OCSP error handling. CVE-2026-84964 - Fix unsafe casts during JSON parsing. CVE-2026-84965 - Fix possible unsafe...

Fedora 44 : unbound (2026-996b326401)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-996b326401 advisory. Update to 1.26.1 rhbz2535076 Security fix list from upstream: - Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when...

RockyLinux 8 : unbound (RLSA-2026:70754)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70754 advisory. unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis CVE-2026-82717 unbound: Unbound: Heap buffer overflow via malicious DNSSEC...

RHEL 9 : unbound (RHSA-2026:71487)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71487 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Remote Code...

Linux Distros Unpatched Vulnerability : CVE-2026-93280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - greybus: audio: bound the topology section sizes against the fetched size gbaudiogbgettopology fetches a topology blob of a module-supplied size, and...

Citrix Workspace App for Windows Multiple Vulnerabilities (CTX697034)

The version of Citrix Workspace App installed on the remote Windows host is 2507 / 2507.1 LTSR prior to 2507.1 LTSR CU3, or a Current Release prior to 2603.11. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read vulnerability exists in Citrix Workspace app for Windows...

Linux Distros Unpatched Vulnerability : CVE-2026-79313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead o...

Linux Distros Unpatched Vulnerability : CVE-2026-93282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not...

Linux Distros Unpatched Vulnerability : CVE-2026-79311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init. CVE-2026-79311 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2026-96546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in...

Linux Distros Unpatched Vulnerability : CVE-2026-93270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Disallow interpreter fallback for BPFADDRPERCPU insn The BPFMOV64PERCPUREG insn requires JIT to emit native code to for 'dstreg = srcreg + '. However, the...

Linux Distros Unpatched Vulnerability : CVE-2026-97149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method,...

Linux Distros Unpatched Vulnerability : CVE-2026-88350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability exists in MPack 1.1.1 in mpacknodecstralloc and mpacknodeutf8cstralloc. CVE-2026-88350 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2026-88386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the functio...

Linux Distros Unpatched Vulnerability : CVE-2026-92288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because...

Linux Distros Unpatched Vulnerability : CVE-2026-81879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PNXNUM handling was vulnerable because the ELF pars...

Linux Distros Unpatched Vulnerability : CVE-2026-88339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO...

Linux Distros Unpatched Vulnerability : CVE-2026-93284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/pagemap: dma-unmap pages before handling migration errors drmpagemapmigrateunmappages relies on the pages array to determine which pages require DMA...

Fedora 43 : mingw-gdk-pixbuf (2026-4e6575b35f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4e6575b35f advisory. Backport fixes for CVE-2026-16768 and CVE-2026-81893. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 44 : patool (2026-23dc582dae)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-23dc582dae advisory. Bump to 4.1.0 rhbz2421500 and rhbz2508373 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

RockyLinux 8 : tar (RLSA-2026:70390)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70390 advisory. tar: Tar path traversal CVE-2025-45582 tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X'...

Fedora 45 : squid (2026-9e8f1c83d0)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9e8f1c83d0 advisory. - new version 7.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 43 : kernel (2026-8202400aa0)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8202400aa0 advisory. The 7.2.7 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Fedora 45 : bcm283x-firmware / uboot-tools (2026-313e66c007)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-313e66c007 advisory. Update to the latest U-Boot 2026.10 RC4 fixes Display fixes from sleep for some generations of Raspberry Pi Tenable has extracted the preceding description...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124487 advisory. Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as a=...

RHCOS 4 : OpenShift Container Platform 4.14.74 (RHSA-2026:67836)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67836 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 -...