Photon OS 5.0: Linux PHSA-2026-5.0-91-0931

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0931. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Bubblewrap PHSA-2026-4.0-1095

An update of the bubblewrap package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1095. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1000

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1000. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Cisco IOS XE Software SNMPv3 Configuration Restriction (cisco-sa-snmpv3-qKEYvzsy)

According to its self-reported version and configuration, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the implementation of the Simple Network Management Protocol Version 3 SNMPv3 feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0717

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0717. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-99222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: Protect the read method check against type removal keyctlreadkey checks key-type-read without holding key-sem. A reference keeps the key alive, but does n...

Unity Linux 20.1060a / 20.1070a Security Update: mysql (UTSA-2026-150122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150122 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily...

Photon OS 5.0: Openssh PHSA-2024-5.0-90-0307

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0307. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150092 advisory. c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. Th...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0991

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0991. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 7 : libxml2 (RHSA-2026:93791)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93791 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

Photon OS 5.0: Iperf PHSA-2026-5.0-91-0995

An update of the iperf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0995. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssh PHSA-2026-5.0-91-0991

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0991. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-99236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Reject incomplete event filter expressions A non-empty expression normally finishes in predicateparse's inner loop, which resolves the pending logical...

CentOS Linux 8.4 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS8.4:CLSA-2026:1793645109)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793645109 advisory. - OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing...

Oracle Solaris Critical Patch Update : oct2026_SRU11_4_95_227_1

The version of Solaris installed on the remote host is prior to 11.4.95.227.1. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11oct2026SRU114952271 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported versi...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0521

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0521. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Debian dla-4879 : charon-cmd - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4879 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4879-1 [email protected]...

AlmaLinux 10 : kernel (ALSA-2026:93911)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:93911 advisory. kernel: ethtool: cmis: require exact CDB reply length CVE-2026-63996 Tenable has extracted the preceding description block directly from the AlmaLinux security...

Linux Distros Unpatched Vulnerability : CVE-2026-119843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing...

CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel (CENTOS7:CLSA-2026:1793202461)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793202461 advisory. - FreeRDP before 3.32.0 fails to close prior serial handles in serialprocessirpcreate, allowing a malicious RDP server to exhaust file descriptor...

RHEL 9 : perl-HTTP-Daemon (RHSA-2026:93586)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93586 advisory. The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers...

Photon OS 5.0: Nss PHSA-2023-5.0-90-0014

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-90-0014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 8 : webkit2gtk3-2.54.2-1.el8_10.ML.1 (AXSA:2026-2223:13)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2223:13 advisory. chromium-browser: angle: Use after free in ANGLE CVE-2026-95325 chromium-browser: angle: Out of bounds write in ANGLE CVE-2026-95331 chromium-browse...

Linux Distros Unpatched Vulnerability : CVE-2026-120065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to identify rows. It places the column's nam...

CentOS Linux 8 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS-STREAM8:CLSA-2026:1793645096)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1793645096 advisory. - OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP...

MiracleLinux 8 : thunderbird-140.17.0-1.el8_10.ML.1 (AXSA:2026-2225:25)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2225:25 advisory. firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-92035 firefox: thunderbird:...

RHEL 7 : freerdp (RHSA-2026:93559)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93559 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

RHEL 8 : libkcapi (RHSA-2026:93453)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93453 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a...

Oracle Linux 8 : wireshark (ELSA-2026-93627)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-93627 advisory. - DoS via heap-based buffer overflow in SPDY dissector CVE-2026-95387 Tenable has extracted the preceding description block directly from the Oracle Linux...

Photon OS 5.0: Libsolv PHSA-2026-5.0-91-0997

An update of the libsolv package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0997. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-120436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computin...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0989

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0989. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libssh2 PHSA-2026-5.0-92-0985

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0985. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-120066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with t...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0472

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0472. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Curl PHSA-2026-5.0-92-0907

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0907. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Wget PHSA-2026-5.0-92-1009

An update of the wget package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Samba PHSA-2026-4.0-1082

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1082. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2024-5.0-90-0190

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0190. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-91-1000

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1000. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Ruby PHSA-2025-5.0-90-0469

An update of the ruby package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0469. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Tanium Server 7.7.3.x < 7.7.3.8351 / 7.8.2.x < 7.8.2.1263 / 7.8.4.x < 7.8.4.1399 Multiple Vulnerabilities

The version of Tanium Server installed on the remote host is 7.7.3.x prior to 7.7.3.8351, 7.8.2.x prior to 7.8.2.1263, or 7.8.4.x prior to 7.8.4.1399. It is, therefore, affected by multiple vulnerabilities: - Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. This...

RHEL 8 : wireshark (RHSA-2026:93627)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93627 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes:...

Linux Distros Unpatched Vulnerability : CVE-2026-99231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/waitid: own the request before clearing -head iowaitidremovewq only takes the wait queue lock if -head is set. iowaitidwait clears -head first thing,...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: ca-certificates (UTSA-2026-150151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150151 advisory. eMudhraemSign CA Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not tested for this issu...

Fedora 43 : retsnoop (2026-e06a56e9b6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e06a56e9b6 advisory. Rebuild retsnoop with newer versions of the ruzstd fedora, epel10, epel9 and memmap2 fedora, epel10, epel10.3, epel10.2, epel9 crates to address multiple...

Linux Distros Unpatched Vulnerability : CVE-2026-104063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pix...

Fedora 43 : rust-sequoia-chameleon-gnupg (2026-820300b63a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-820300b63a advisory. Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0285, RUSTSEC-2026-0346,...

RHEL 9 : gimp (RHSA-2026:93975)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93975 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...