Oracle Linux 9 : bind (ELSA-2026-93610)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93610 advisory. - Fix CVE-2026-94300: Arbitrary code execution via GSS-TSIG UDP message replay. - Fix CVE-2026-97313: Denial of Service via assertion failure in RPZ...

Oracle Linux 8 : bind (ELSA-2026-93925)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93925 advisory. - CVE-2026-94300 bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay - CVE-2026-19630 bind: BIND: Denial of Service via unbounded...

RHEL 9 : kernel (RHSA-2026:94438)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94438 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: pfifotailenqueue: Drop new...

Microsoft Visual Studio 15.9.x < 15.9.84 / 16.11.x < 16.11.61 / 17.14.x < 17.14.43 / 18.x < 18.11.2 Brotli Decoder Out-of-bounds Write (CVE-2026-111497)

The version of Microsoft Visual Studio installed on the remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability: - A buffer overflow in the Brotli decoder c/dec/decode.c in Google Brotli 1.0.3 through 1.2.0 allows a remote...

Kibana 8.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 RCE (ESA-2026-238)

The version of Kibana installed on the remote host is 8.x prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-238 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google...

Photon OS 5.0: Nodejs PHSA-2026-5.0-92-1049

An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RockyLinux 10 : opentelemetry-collector (RLSA-2026:93596)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:93596 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multipl...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793321383)

"The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793321383 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix premature hw access after PCI error After a...

TencentOS Server 4: keylime (TSSA-2026:0100)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0100 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-113872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2.0.0 before 2.5.0, when multer is configured with an...

Photon OS 5.0: Python3 PHSA-2026-5.0-90-0741

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0741. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-120432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt heap memory via...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0960

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-65059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzi...

Oracle Linux 10 : podman (ELSA-2026-93464)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-93464 advisory. - update to the latest upstream commit aae8b839 - fixes CVE-2025-11395 Tenable has extracted the preceding description block directly from the Oracle Linux...

Photon OS 5.0: Unbound PHSA-2026-5.0-92-1013

An update of the unbound package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 7 : firefox (RHSA-2026:92363)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:92363 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150100 advisory. The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all...

Photon OS 5.0: Nss PHSA-2026-5.0-90-0801

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0801. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150077 advisory. When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checks...

AlmaLinux 9 : thunderbird (ALSA-2026:93443)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:93443 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764 firefox:...

CentOS Linux 6 [TuxCare] Security Update: e2fsprogs / e2fsprogs-devel / e2fsprogs-libs / libcom_err / etc (CENTOS6:CLSA-2026:1793164113)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793164113 advisory. - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code...

Photon OS 5.0: Python3 PHSA-2024-5.0-90-0356

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0356. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : libXtst (RHSA-2026:93449)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93449 advisory. X.Org X11 libXtst runtime library Security Fixes: libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286 F...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0486

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0486. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Samba PHSA-2025-5.0-90-0648

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0648. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 45 : python-streamlink (2026-73fcc91d16)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-73fcc91d16 advisory. streamlink 8.6.2 2026-10-07 - SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags CVE-2026-TO-BE- ASSIGNED / GHSA-j7pf-m7gx- jr3...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150082 advisory. The use of proto in process.mainModule.proto.require can bypass the policy mechanism and require modules outside of the policy.json definition. This vulnerability...

Fedora 43 : kernel (2026-5643aa2228)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5643aa2228 advisory. The 7.2.14 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly from the...

Photon OS 5.0: Openssl PHSA-2026-5.0-92-1024

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0976

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0976. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150098 advisory. Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is...

Photon OS 5.0: Libpcap PHSA-2026-5.0-91-0954

An update of the libpcap package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0954. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150117 advisory. Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is...

Unity Linux 20.1060a / 20.1070a Security Update: mysql (UTSA-2026-150118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150118 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 8.0.16 and prior. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-104066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit...

RHEL 9 : nginx (RHSA-2026:93472)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93472 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0517

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0517. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 10 : libXi (RHSA-2026:93441)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93441 advisory. X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090...

Linux Distros Unpatched Vulnerability : CVE-2026-100140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability in the Qt XML parsing Qt5Compat / QXmlSimpleReader functionality of Qt. CVE-2026-100140 Note that Nessus relies on the presenc...

AlmaLinux 9.6 [TuxCare] Security Update: perl-DBI (ALMALINUX9.6:CLSA-2026:1793617036)

"The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793617036 advisory. - DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. DBD::DBM passes the...

RockyLinux 8 : perl:5.32 (RLSA-2026:85917)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85917 advisory. URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization CVE-2026-19953 Tenable has extracted the preceding...

Rocky Linux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793631900)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793631900 advisory. - OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify- Class replaces an...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150073 advisory. Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authorization headers on cross-origin redirects, but d...

Photon OS 5.0: Rabbitmq PHSA-2026-5.0-91-0978

An update of the rabbitmq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0978. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2025-5.0-90-0534

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0534. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Dotnet PHSA-2026-5.0-91-1014

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-99229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/wait: don't spin on a stuck overflow list As long as IOCHECKCQOVERFLOWBIT is set, iocqringwaitschedule returns right away, before it gets to look at...

CentOS Linux 7 [TuxCare] Security Update: sg3_utils / sg3_utils-devel / sg3_utils-libs (CENTOS7:CLSA-2026:1793282031)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793282031 advisory. - A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0449

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0449. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...