RHEL 10 : libXtst (RHSA-2026:93448)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93448 advisory. X.Org X11 libXtst runtime library Security Fixes: libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286...

Photon OS 5.0: Python3 PHSA-2025-5.0-92-0688

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0688. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Rsync PHSA-2026-5.0-92-0991

An update of the rsync package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0991. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : tomcat (ELSA-2026-93469)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93469 advisory. - Resolves: RHEL-255800 tomcat: Security constraint bypass due to improper access control CVE-2026-65182 - Resolves: tomcat: Local information...

Photon OS 5.0: Bindutils PHSA-2026-5.0-90-1030

An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1030. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AlmaLinux 9.6 [TuxCare] Security Update: perl-URI / perl-URI-tests (ALMALINUX9.6:CLSA-2026:1793618466)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793618466 advisory. - URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep...

Alibaba Cloud Linux 3 : 0333: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2026:0333)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0333 advisory. Package updates are available for Alibaba Cloud Linux 3 Pro that fix the following vulnerabilities: CVE-2026-98432: In the Linux kernel, the...

RHEL 9 : opentelemetry-collector (RHSA-2026:93617)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:93617 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: net/http: golang: golang: Denial of Service vi...

RHEL 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:94101)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:94101 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2026:94100)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:94100 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers ca...

Oracle Linux 10 : .NET / 8.0 (ELSA-2026-92428)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-92428 advisory. 8.0.133-1.0.1 - Add support for Oracle Linux 8.0.133-1 - Update to .NET SDK 8.0.133 and Runtime 8.0.33 - Resolves: RHEL-291718 Tenable has extracted...

Fedora 43 : rust-rpki (2026-2218942eac)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2218942eac advisory. Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0285, RUSTSEC-2026-0346,...

MiracleLinux 8 : firefox-153.5.0-1.el8_10.ML.1 (AXSA:2026-2224:30)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2224:30 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: thunderbird: Privilege escalation in the Application Update component...

Photon OS 5.0: Libxml2 PHSA-2026-5.0-92-1002

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1002. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Debian dla-4878 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4878 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4878-1 [email protected]...

MiracleLinux 8 : expat-2.5.0-6.el8_10 (AXSA:2026-2227:15)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2227:15 advisory. expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read ...

CentOS Linux 6 [TuxCare] Security Update: xz / xz-devel / xz-libs / xz-lzma-compat (CENTOS6:CLSA-2026:1793265274)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793265274 advisory. - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0486

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0486. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2026-5.0-90-0816

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0816. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : libXtst (RHSA-2026:93449)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93449 advisory. X.Org X11 libXtst runtime library Security Fixes: libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286 F...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150074 advisory. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in...

Photon OS 5.0: Unbound PHSA-2026-5.0-92-1013

An update of the unbound package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Samba PHSA-2025-5.0-90-0648

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0648. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 10 : opentelemetry-collector (RHSA-2026:93596)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:93596 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: net/http: golang: golang: Denial of Service v...

Photon OS 5.0: Krb5 PHSA-2026-5.0-92-0978

An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0978. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150079)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150079 advisory. The use of module.constructor.createRequire can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This...

Photon OS 5.0: Python3 PHSA-2026-5.0-90-0741

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0741. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CentOS Linux 6 [TuxCare] Security Update: e2fsprogs / e2fsprogs-devel / e2fsprogs-libs / libcom_err / etc (CENTOS6:CLSA-2026:1793164113)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793164113 advisory. - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code...

Rocky Linux 9 [CIQ] Security Update: bind9.18 / bind9.18-chroot / bind9.18-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_93072)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693072 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP messag...

RHEL 7 : firefox (RHSA-2026:92363)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:92363 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

Linux Distros Unpatched Vulnerability : CVE-2026-120432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to corrupt heap memory via...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0960

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AlmaLinux 9 : thunderbird (ALSA-2026:93443)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:93443 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764 firefox:...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0517

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0517. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RockyLinux 8 : perl:5.32 (RLSA-2026:85917)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85917 advisory. URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization CVE-2026-19953 Tenable has extracted the preceding...

Fedora 45 : ruby (2026-f03a317854)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f03a317854 advisory. New version 4.0.9 is released. This new rpm contains several bug fixes in Onigumo regular expression compilation. Tenable has extracted the preceding...

Fedora 44 : retsnoop (2026-b020b6af45)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b020b6af45 advisory. Rebuild retsnoop with newer versions of the ruzstd fedora, epel10, epel9 and memmap2 fedora, epel10, epel10.3, epel10.2, epel9 crates to address multiple...

AlmaLinux 9.6 [TuxCare] Security Update: perl-DBI (ALMALINUX9.6:CLSA-2026:1793617036)

"The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793617036 advisory. - DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. DBD::DBM passes the...

Oracle Linux 10 : podman (ELSA-2026-93464)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-93464 advisory. - update to the latest upstream commit aae8b839 - fixes CVE-2025-11395 Tenable has extracted the preceding description block directly from the Oracle Linux...

Photon OS 4.0: Pcre2 PHSA-2026-4.0-1084

An update of the pcre2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1084. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2024-5.0-90-0356

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0356. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssl PHSA-2026-5.0-92-1024

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150077 advisory. When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checks...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150082 advisory. The use of proto in process.mainModule.proto.require can bypass the policy mechanism and require modules outside of the policy.json definition. This vulnerability...

Fedora 45 : python-streamlink (2026-73fcc91d16)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-73fcc91d16 advisory. streamlink 8.6.2 2026-10-07 - SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags CVE-2026-TO-BE- ASSIGNED / GHSA-j7pf-m7gx- jr3...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150100)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150100 advisory. The use of Module.load can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all...

Photon OS 5.0: Nss PHSA-2026-5.0-90-0801

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0801. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-65059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzi...

RHEL 10 : libXi (RHSA-2026:93441)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93441 advisory. X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1014

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...