Linux Distros Unpatched Vulnerability : CVE-2026-99249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pidnamespace: make zappidnsprocesses freezable When the init of a pid namespace exits, zappidnsprocesses waits until all other pids in the namespace are freed. ...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0960

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-99243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - io-wq: order the exit bit against worker creation task work iowqexitworkers cancels task work for queued worker creation with taskworkcancelmatch. That has a...

TencentOS Server 4: keylime (TSSA-2026:0100)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0100 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CentOS Linux 8.4 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1793699623)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793699623 advisory. - SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITELIMITEXPRDEPTH nesting...

Linux Distros Unpatched Vulnerability : CVE-2026-99267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/napi: make stale entries time out after 60s With dynamic tracking a NAPI id that hasn't been seen for a minute is meant to be dropped from the list the...

AlmaLinux 9.2 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793725705)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793725705 advisory. - When an FTP wildcard LIST operation fails, libcurl omits the restoration path meant for successful listings, leaving the write...

Linux Distros Unpatched Vulnerability : CVE-2026-121397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in savepngtobuffer that allows malicious RDP servers to leak client memory by sending 16 bp...

RHEL 8 : python3 (RHSA-2026:94443)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94443 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

Oracle Linux 10 : freerdp (ELSA-2026-94514)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-94514 advisory. 2:3.32.2-1 - Update to 3.32.2 - Backport gateway freeze and busy-loop fixes, including partial-header handling - Reset completed RDG header state...

Fedora 44 : barman / python-uv-build / ruff / rust-archive-trait / etc (2026-05eeaf8ac6)

"The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-05eeaf8ac6 advisory. Update uv and python-uv-build to version 0.13.5. This includes some breaking changes to uv but none to python-uv-build %NASLMINLEVEL 80900 C Tenable, Inc. T...

Linux Distros Unpatched Vulnerability : CVE-2026-114417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - phodav - None CVE-2026-114417 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, In...

RockyLinux 8 : ghostscript (RLSA-2026:93978)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:93978 advisory. ghostscript: Reintroduction of .charkeys -dSAFER bypass in Rocky Linux 8 CVE-2026-112177 Tenable has extracted the preceding description block directly from the...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0989

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0989. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

TencentOS Server 4: golang (TSSA-2026:0118)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0118 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Photon OS 5.0: Python3 PHSA-2026-5.0-90-0744

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0744. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Kibana 8.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 (ESA-2026-237)

"The version of Kibana installed on the remote host is 8.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-237 advisory. - Improper Certificate Validation CWE-295 in the operating system certificate...

Linux Distros Unpatched Vulnerability : CVE-2026-119025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows an...

Linux Distros Unpatched Vulnerability : CVE-2026-99246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: protect node reset trace dump with node lock The tipcnoderesetlinks trace event asks tipcnodedump to walk the node's link entries. Unlike the other node...

Linux Distros Unpatched Vulnerability : CVE-2026-99260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: fix resident conversion in ntfsnewattrflags When setting sparse/compressed flags on a resident attribute, the function skipped the resident-to-non-residen...

RHEL 8 : freerdp (RHSA-2026:94510)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94510 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Photon OS 5.0: Python3 PHSA-2026-5.0-90-0827

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0827. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-99244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pidnamespace: prevent TIFNOTIFYSIGNAL from interrupting the reaper Since commit 7fea700e04bd zappidnsprocesses: clear TIFNOTIFYSIGNAL along with TIFSIGPENDING...

RHEL 8 : raptor2 (RHSA-2026:94519)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:94519 advisory. Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security...

EulerOS Virtualization 2.13.1 : curl (EulerOS-SA-2026-1635)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification...

Linux Distros Unpatched Vulnerability : CVE-2026-120831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libslirp in ifoutput. When moving a session from the fast queue to the batch queue, the code unlinked and reinserted an arbitrary packet via...

RHEL 9 : cockpit (RHSA-2026:94533)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94533 advisory. Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic...

Linux Distros Unpatched Vulnerability : CVE-2026-121405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory...

SUSE SLES15 Security Update : rootlesskit (SUSE-SU-2026:5035-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:5035-1 advisory. This update for rootlesskit rebuilds it against the current go security release. Tenable has extracted the preceding description block...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:4954-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4954-1 advisory. - CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. - CVE-2026-11856: cross-origin Dige...

FreeBSD : phpBB -- multiple vulnerabilities (4784d4b8-d6a9-11f1-8a93-a0369f6e85b8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4784d4b8-d6a9-11f1-8a93-a0369f6e85b8 advisory. The phpBB Team reports: The fixes were announced with phpBB 3.3.18, but the 3.3.18 downloads did not...

AlmaLinux 9.2 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793692618)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793692618 advisory. - A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and...

Photon OS 5.0: Httpd PHSA-2026-5.0-90-1056

An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1056. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLED15 / SLES15 Security Update : suseconnect-ng (SUSE-SU-2026:5005-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5005-1 advisory. This update for suseconnect-ng rebuilds it against the current go security release. Tenable has extracted the preceding...

CentOS Linux 8.5 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1793699875)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793699875 advisory. - SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITELIMITEXPRDEPTH nesting...

Elasticsearch 8.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 Incorrect Authorization (ESA-2026-209)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-209 advisory. - Incorrect Authorization CWE-863 in Elasticsearch can lead to information...

Oracle Linux 8 : pcs (ELSA-2026-0930)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0930 advisory. 0.10.18-2.0.1.el810.8 - Replaced HAM-logo 0.10.18 - Debrand PCS 0.10.18-2.el810.8 - Fixed CVE-2025-67725, CVE-2025-67726 by patching bundled Tornado...

Oracle Linux 9 : glib2 (ELSA-2026-0936)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0936 advisory. 2.68.4-18.1 - Add patch for CVE-2025-13601 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-29508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ReadyMedia formerly MiniDLNA versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memo...

RHEL 9 : fence-agents (RHSA-2026:94557)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94557 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or...

Linux Distros Unpatched Vulnerability : CVE-2026-99253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/cancel: rearm local work wake up before sleep iouringtrycancelrequests sets -cqwaitnr to 1 so that the next ioreqlocalworkadd wakes the cancelling task...

MiracleLinux 8 : dotnet9.0-9.0.123-1.el8_10 (AXSA:2026-2237:22)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2237:22 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Tenable has extracted the preceding descripti...

Photon OS 5.0: Python3 PHSA-2026-5.0-91-0793

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0793. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AlmaLinux 9 : kernel (ALSA-2026:93930)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93930 advisory. kernel: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES CVE-2026-63987 kernel: ethtool: cmis: require exact CDB reply length...

Google Chrome < 156.0.8078.88 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 156.0.8078.88. It is, therefore, affected by a vulnerability as referenced in the 202611extended-stable-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the...

Linux Distros Unpatched Vulnerability : CVE-2026-99263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/poll: avoid retry wakeup loss when dropping ownership If a wakeup sets IOPOLLRETRYFLAG between the owning task consuming the existing instance of...

Google Chrome < 156.0.8078.88 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 156.0.8078.88. It is, therefore, affected by a vulnerability as referenced in the 202611extended-stable-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the...

RockyLinux 10 : pipewire (RLSA-2026:93442)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:93442 advisory. pipewire: Pulse Server alloca Stack Overflow CVE-2026-14330 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

Photon OS 5.0: Erlang PHSA-2026-5.0-91-0958

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0958. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-121439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-http p3 that allows guests to set unvalidated...