MiracleLinux 9 : python3.12-3.12.14-1.el9_8 (AXSA:2026-1670:21)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1670:21 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding...

RockyLinux 9 : attr (RLSA-2026:60226)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:60226 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the...

RockyLinux 10 : ruby4.0 (RLSA-2026:50773)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:50773 advisory. zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF...

GLSA-202608-28 : Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-28 Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced...

MiracleLinux 8 : dotnet8.0-8.0.130-1.el8_10.ML.1 (AXSA:2026-1674:16)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1674:16 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

SUSE SLES15 Security Update : kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3770-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3770-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues: The following security issues were fixed: -...

TencentOS Server 3: attr (TSSA-2026:0908)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0908 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

SUSE SLES12 Security Update : librest (SUSE-SU-2026:3796-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3796-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically...

TencentOS Server 3: dracut (TSSA-2026:0902)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0902 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Oracle Linux 8 : ELSA-2026-60329-0: / mingw-openssl (ELSA-2026-603290)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-603290 advisory. - Fix CVE-2024-5535 SSLselectnextproto buffer overread Resolves: RHEL-45673 Tenable has extracted the preceding description block directly from the Oracle Lin...

Fedora 43 : rsync (2026-d6763b4c84)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d6763b4c84 advisory. New version 3.5.0. Includes fixes for following CVEs: CVE-2026-53783, CVE-2026-53784, CVE-2026-53785, CVE-2026-53786, CVE-2026-53788, CVE-2026-53789...

TencentOS Server 3: nodejs:22 (TSSA-2026:0922)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0922 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

SUSE SLES15 Security Update : kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3771-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3771-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: -...

Fedora 43 : knot (2026-4857ca6db8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4857ca6db8 advisory. New upstream release with security fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

MiracleLinux 8 : kernel-4.18.0-553.153.1.el8_10 (AXSA:2026-1646:66)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1646:66 advisory. kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 Tenable has extracted the preceding description block...

Dell Client BIOS Arbitrary Write (DSA-2026-280)

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write. Note that Nessus has not tested for this issue but has instead relied only...

Linux Distros Unpatched Vulnerability : CVE-2026-81725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption ...

Linux Distros Unpatched Vulnerability : CVE-2026-18374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may...

Linux Distros Unpatched Vulnerability : CVE-2026-79921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process...

TencentOS Server 3: bind9.16 (TSSA-2026:0925)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0925 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: libXfont2 (TSSA-2026:0901)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0901 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2026:3792-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3792-1 advisory. This update for rmt-server fixes the following issue: Update to version 3.1 bsc1274715. - CVE-2026-42256: net-imap: hostile server can perfo...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032291 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098734)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098734 advisory. In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104770 advisory. Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104758 advisory. Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client...

Linux Distros Unpatched Vulnerability : CVE-2026-79086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a...

Oracle Linux 8 : nginx:1.24 (ELSA-2026-59216)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59216 advisory. - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngxhttpslicemodule CVE-2026-60005 - Resolves: RHEL-21930...

Linux Distros Unpatched Vulnerability : CVE-2026-79046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098719 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD assoclen8 to match ESP/ESN spec authencesn assumes an...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098779 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: 3ad: implement proper RCU rules for port-aggregator syzbot found a data-race in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098916 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: Wh...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104589 advisory. In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on buildskb failure qederxbuildskb and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098963 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: limit BONDMODE8023AD to Ethernet devices BONDMODE8023AD makes sense for ARPHRDETHER only...

Oracle Access Manager (August 2026 CSPU)

The 12.2.1.4.0 and 14.1.2.1.0 versions of Access Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Support...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098733)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098733 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schhfsc: fix divide-by-zero in rtscmin m2sm converts a u32 slope to a u64 scaled value...

Linux Distros Unpatched Vulnerability : CVE-2026-80539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: disallow multiple FENCE chunks in one submit amdgpucspass1 dispatches on chunkid once per chunk without rejecting repeated ids. p-ufbo is a...

Linux Distros Unpatched Vulnerability : CVE-2026-79047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...

Linux Distros Unpatched Vulnerability : CVE-2026-74754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: core: pair EH runtime PM get and put shost-ehnoresume is currently consulted twice in one error handling iteration: once before scsiautopmgethost and once...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104760 advisory. C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098822)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098822 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsflow: fix NULL pointer dereference on shared blocks flowchange calls tcfblockq and...

RHEL 9 : RHEL AI 3.4 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:60334)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60334 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104781 advisory. Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the COP...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098912)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098912 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: remove multicast group from hash table on device destruction When a device is destroy...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061551 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.7.36 and prior and 8.0.27 a...

Linux Distros Unpatched Vulnerability : CVE-2026-79283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium securi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104613)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104613 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matche...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098837 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guar...

Photon OS 5.0: Glib PHSA-2026-5.0-91-0960

An update of the glib package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-80547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Implement a crw lock Unlike the channelprogram struct, which covers synchronous I/O submissions and asynchronous interrupts, the CRW region relies...