Linux Distros Unpatched Vulnerability : CVE-2026-121048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

TencentOS Server 2: libpng (TSSA-2026:1361)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1361 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2026_93443)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693443 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764 firefox:...

Linux Distros Unpatched Vulnerability : CVE-2026-121092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

Fedora 44 : helix / rust-dua-cli / rust-gengo-bin / rust-gitui / stgit (2026-e2538282de)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-e2538282de advisory. Rebuilt several packages with faster-hex version 0.10.1 to fix RUSTSEC-2026-0306, an unsoundness issue on x86 and x8664 when AVX2 is enabled. Tenable has...

Fedora 46 : python-loguru (2026-3d50e0ef85)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3d50e0ef85 advisory. Automatic update for python-loguru-0.7.3-23.fc46. Changelog Wed Nov 4 2026 Benjamin A. Beasley - 0.7.3-23 - Backport fix for CVE-2026-120217; Fixes RHBZ25656...

Linux Distros Unpatched Vulnerability : CVE-2026-121119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag...

TencentOS Server 2: compat-libtiff3 (TSSA-2026:1352)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1352 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Fedora 44 : kernel (2026-cd5f04a397)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cd5f04a397 advisory. The 7.2.12 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-121114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-121184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

Linux Distros Unpatched Vulnerability : CVE-2026-121050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-121115

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged...

Linux Distros Unpatched Vulnerability : CVE-2026-121062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system acces...

Linux Distros Unpatched Vulnerability : CVE-2026-121233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

Fedora 45 : chromium (2026-253271f6fe)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-253271f6fe advisory. Update to 156.0.8078.73, include 21 security fixes CVE-2026-119260: Use after free in Frames CVE-2026-119261: Improper input validation in Skia...

Linux Distros Unpatched Vulnerability : CVE-2026-119417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email header injection vulnerability because...

MiracleLinux 8 : mod_auth_openidc:2.3 cjose-0.6.1-6.module+el8+2074+697a2d2d, mod_auth_openidc-2.4.9.4-9.module+el8+2074+697a2d2d (AXSA:2026-2245:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2245:01 advisory. cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Tenable has extracted the preceding description bloc...

OpenJDK 8 <= 8u382 / 11.0.0 <= 11.0.20 / 17.0.0 <= 17.0.8 / 21.0.0 <= 21.0.0 Multiple Vulnerabilities (2023-10-17)

The version of OpenJDK installed on the remote host is 8 prior to or at 8u382 / 11.0.0 prior to or at 11.0.0 / 17.0.0 prior to or at 17.0.8 / prior to or at 21.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-10-17 advisory. Please Note: Java CVEs do not alway...

Linux Distros Unpatched Vulnerability : CVE-2026-121401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8968-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8968-1 advisory. It was discovered that the Bluetooth subsystem in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-120756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5Ochunkdeserialize in src/H5Ocache.c. When decoding object header messages, the declared...

Linux Distros Unpatched Vulnerability : CVE-2026-121201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

Fedora 43 : helix / rust-dua-cli / rust-gengo-bin / rust-gitui / stgit (2026-957c1e5c9d)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-957c1e5c9d advisory. Rebuilt several packages with faster-hex version 0.10.1 to fix RUSTSEC-2026-0306, an unsoundness issue on x86 and x8664 when AVX2 is enabled. Tenable has...

Ubuntu 16.04 LTS : BitlBee vulnerabilities (USN-8977-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8977-1 advisory. It was discovered that BitlBee incorrectly handled file transfer connections that expired when built with libpurple. A remote attacker could possibly use...

RHEL 10 : fence-agents (RHSA-2026:95012)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95012 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

Rocky Linux 10.2 [CIQ] Security Update: libblkid / libblkid-debuginfo / libblkid-devel / libfdisk / etc Multiple Vulnerabilities (crlsa-2026_93461)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693461 advisory. util-linux: TOCTOU in the mount program when setting up loop devices CVE-2026-27456 util-linux: util-linux: heap use-after-free in libblkid nested...

Linux Distros Unpatched Vulnerability : CVE-2026-121034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-121205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via ...

Linux Distros Unpatched Vulnerability : CVE-2026-120631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse. CGI's cookie method...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-92431)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92431 advisory. 10.0.114-1.0.2 - Add support for Oracle Linux - build dotnet-host 10.0.114-1 - Update to .NET SDK 10.0.114 and Runtime 10.0.14 - Resolves: RHEL-291741 10.0.113...

TencentOS Server 2: 389-ds-base (TSSA-2026:1357)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1357 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-121068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-121243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Frames in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-121039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network...

RHEL 10 : tesseract (RHSA-2026:95085)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95085 advisory. A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by...

Linux Distros Unpatched Vulnerability : CVE-2026-121135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-121030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-121097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : DMitry vulnerabilities (USN-8980-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8980-1 advisory. It was discovered that DMitry incorrectly handled long arguments, leading to a stack-based buffer overflo...

Linux Distros Unpatched Vulnerability : CVE-2026-121094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-121206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a...

Fedora 44 : python3.9 (2026-2758f89ce1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2758f89ce1 advisory. - Security fix for CVE-2026-11940 - Security fix for CVE-2026-15308 Tenable has extracted the preceding description block directly from the Fedora...

Linux Distros Unpatched Vulnerability : CVE-2026-121070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-121081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to obtain sensitive informatio...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : rxvt-unicode vulnerability (USN-8991-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8991-1 advisory. It was discovered that rxvt-unicode incorrectly handled certain escape sequences. An attacker could possibly use this issue to execute...

Linux Distros Unpatched Vulnerability : CVE-2026-121080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Codecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-121241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the...

RockyLinux 8 : cockpit (RLSA-2026:94485)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:94485 advisory. cockpit: Cockpit: Denial of Service in cockpit-ws due to URL-root handling without a trailing slash CVE-2026-91147 cockpit-ws: cockpit: cockpit-ws:...

Linux Distros Unpatched Vulnerability : CVE-2026-54883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ofono - None Ubuntu Linux - Unknown description CVE-2026-54883 Note that Nessus relies on the presence of the package as reported by the vendor...