AlmaLinux 8 : qt5-qtbase (ALSA-2026:93924)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93924 advisory. qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization CVE-2026-11573 qt5-qtbase: qt6-qtbase: Qt: Deni...

EulerOS Virtualization 2.13.0 : bind (EulerOS-SA-2026-1625)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, it is possible for an attacker ...

Fedora 44 : liblerc (2026-54729bee5c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-54729bee5c advisory. Update to liblerc-4.3.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793736353)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793736353 advisory. - Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint...

Photon OS 5.0: Etcd PHSA-2026-5.0-92-0975

An update of the etcd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0975. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1051

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1051. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-99243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - io-wq: order the exit bit against worker creation task work iowqexitworkers cancels task work for queued worker creation with taskworkcancelmatch. That has a...

SUSE SLED15: apache-commons-codec / apache-commons-io / apache-commons-logging / etc (SUSE-SU-2026:5017-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5017-1 advisory. This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon- logkit,...

Fedora 44 : zvbi (2026-055ec4753d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-055ec4753d advisory. Update to 0.2.46 Fixes CVE-2026-110654 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Elasticsearch 8.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 DoS (ESA-2026-235)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-235 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in...

CentOS Linux 6 [TuxCare] Security Update: unzip (CENTOS6:CLSA-2026:1793350631)

The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793350631 advisory. - A heap-based buffer overflow exists in Info-Zip UnZip version = 6.00 in the processing of password- protected archives that allows an attacker ...

Fedora 43 : barman / python-uv-build / ruff / rust-archive-trait / etc (2026-fa66e0fef2)

"The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-fa66e0fef2 advisory. Update uv and python-uv-build to version 0.13.5. This includes some breaking changes to uv but none to python-uv-build %NASLMINLEVEL 80900 C Tenable, Inc. T...

Photon OS 5.0: Acl PHSA-2026-5.0-91-0960

An update of the acl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-120064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it. SQLBindCol with a column number...

Linux Distros Unpatched Vulnerability : CVE-2026-99261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction It fixes both the move overflow and the eviction fence add for evicting these per-vm...

Photon OS 5.0: Apache PHSA-2026-5.0-91-1006

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1006. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Cisco NX-OS Software Command Injection (cisco-sa-nxos-cmdinj-Lq6jsZhH)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the underlying operating system of an affected device. Th...

Fedora 44 : radicale (2026-5a704586a7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5a704586a7 advisory. Update to 3.9.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

FreeBSD : hurl -- multiple vulnerabilities (339bd17a-d6fc-11f1-97dc-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 339bd17a-d6fc-11f1-97dc-40b034429ecf advisory. Hurl project reports: Security Issues Fixed: Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-120060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server- supplied row count in a size subtraction that can underflow...

Linux Distros Unpatched Vulnerability : CVE-2026-120752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JMsetannotcalloutline that copies a caller-supplied number of callout points...

Linux Distros Unpatched Vulnerability : CVE-2026-121424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to redirect recipients by ending...

Oracle Linux 8 : cockpit (ELSA-2026-94485)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-94485 advisory. - ws: don't crash when urlroot has no trailing slash RHEL-262904 CVE-2026-91147 - ws: Free language string also when it comes from the cookie...

Linux Distros Unpatched Vulnerability : CVE-2026-121407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdeskserverthread that allows authenticated clients to crash the proce...

Fedora 45 : kernel (2026-7a0f444c64)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a0f444c64 advisory. The 7.2.15 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Fedora 44 : erlang-hex_core (2026-b300043748)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b300043748 advisory. hexcore ver. 0.21.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

CentOS Linux 7 [TuxCare] Security Update: emacs / emacs-common / emacs-el / emacs-filesystem / emacs-nox / etc (CENTOS7:CLSA-2026:1793361300)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793361300 advisory. - A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs...

RockyLinux 9 : thunderbird (RLSA-2026:93443)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:93443 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764 firefox...

Oracle Linux 10 : fence-agents (ELSA-2026-94501)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-94501 advisory. 4.16.0-21.7 - bundled PyJWT: upgrade to v2.15.1 to fix CVE-2026-102266, CVE-2026-102267, CVE-2026-102268, CVE-2026-102271, and CVE-2026-102272...

Linux Distros Unpatched Vulnerability : CVE-2026-112902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to TIFFSetField that do not match libtiff's definiti...

Linux Distros Unpatched Vulnerability : CVE-2026-121441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 contains a request smuggling vulnerability in wasi-http that allows guests to set multip...

RockyLinux 10 : util-linux (RLSA-2026:93461)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:93461 advisory. util-linux: TOCTOU in the mount program when setting up loop devices CVE-2026-27456 util-linux: util-linux: heap use-after-free in libblkid nested...

FreeBSD : py-pdfminer.six -- Arbitrary Code Execution in pdfminer.six via Crafted PDF Input (fa433f05-c217-11f0-82ac-901b0edee044)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fa433f05-c217-11f0-82ac-901b0edee044 advisory. Pieter Marsman reports: pdfminer.six will execute arbitrary code from a malicious pickle file if provid...

RHEL 10 : freerdp (RHSA-2026:94514)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94514 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Linux Distros Unpatched Vulnerability : CVE-2026-114419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - phodav - None CVE-2026-114419 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, In...

Linux Distros Unpatched Vulnerability : CVE-2026-121399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdgreceivepacket that allows a malicious RD Gateway to force a 2 GiB client allocation befor...

Oracle Linux 9 : fence-agents (ELSA-2026-94500)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-94500 advisory. 4.10.0-110.8 - bundled PyJWT: upgrade to v2.15.1 to fix CVE-2026-102266, CVE-2026-102267, CVE-2026-102268, CVE-2026-102271, and CVE-2026-102272...

RHEL 9 : fence-agents (RHSA-2026:94634)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94634 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

Fedora 45 : knot (2026-b12734706a)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b12734706a advisory. New upstream release containing various security fixes. See release notes for more details. ---- New upstream release containing various security fixes. See...

Fedora 44 : openjpeg (2026-a4c3cdcb67)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a4c3cdcb67 advisory. Apply proposed fix for 2552420. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-112899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. In versions 2.3.0 through 12.3.0, EPS rendering does not validate the scaled image dimensions before invoking Ghostscript...

Kibana 8.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 (ESA-2026-229)

The version of Kibana installed on the remote host is 8.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-229 advisory. - The system certificate authority CA store in Red Hat products, distributed via...

RHEL 10 / 9 : Red Hat Edge Manager Version 1.2.2 Security Update (Important) (RHSA-2026:94632)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94632 advisory. Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports...

Rocky Linux 10.2 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_85930)

The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685930 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS pro...

Linux Distros Unpatched Vulnerability : CVE-2026-104786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - squid - None Ubuntu Linux - security update CVE-2026-104786 Note that Nessus relies on the presence of the package as reported by the vendor...

Photon OS 5.0: Nasm PHSA-2026-5.0-92-1025

An update of the nasm package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1025. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-99250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - printk: Postpone kthread startup There have been various bug reports related to SMP systems hanging on boot. The reports vary but seem to have some overlap with...

Fedora 43 : radicale (2026-3bf33310f5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3bf33310f5 advisory. Update to 3.9.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CentOS Linux 7 [TuxCare] Security Update: libXrender / libXrender-devel (CENTOS7:CLSA-2026:1793351077)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793351077 advisory. - A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X...

Fedora 44 : perl-libnet (2026-3681d1a5b0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3681d1a5b0 advisory. 3.16 - Fix CVE-2026-93469 unbounded response buffering in Net::Cmd Tenable has extracted the preceding description block directly from the Fedora security...