Linux Distros Unpatched Vulnerability : CVE-2026-120830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libslirp in icmpforwarderror. When building an ICMP error response, the length of the quoted original IPv4 packet was taken from the IP head...

Linux Distros Unpatched Vulnerability : CVE-2026-120058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each later FETCH reply without checking that...

CentOS Linux 7 [TuxCare] Security Update: cifs-utils / cifs-utils-devel (CENTOS7:CLSA-2026:1793266869)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793266869 advisory. - A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a...

Linux Distros Unpatched Vulnerability : CVE-2026-120067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a...

MiracleLinux 8 : dotnet10.0-10.0.114-1.el8_10 (AXSA:2026-2232:23)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2232:23 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Tenable has extracted the preceding descripti...

RHEL 8 : webkit2gtk3 (RHSA-2026:93435)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93435 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia:...

Linux Distros Unpatched Vulnerability : CVE-2026-104067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150088 advisory. A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack...

Linux Distros Unpatched Vulnerability : CVE-2026-115698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - iwd - None Ubuntu Linux - Unknown description CVE-2026-115698 Note that Nessus relies on the presence of the package as reported by the vendor...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150085 advisory. c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will not be set, as seen when cross...

CentOS Linux 7 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793296189)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793296189 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace functio...

Linux Distros Unpatched Vulnerability : CVE-2026-99220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - asymmetrickeys: reject trust keys without IDs The PKCS8 parser deliberately leaves the asymkeyids payload slot empty. keyorkeyringcommon unconditionally...

Fedora 45 : asciinema (2026-d0727c4729)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d0727c4729 advisory. Rebuild asciinema with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0285, RUSTSEC-2026-034...

RHEL 10 : kernel (RHSA-2026:93911)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93911 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ethtool: cmis: require exact CDB repl...

Linux Distros Unpatched Vulnerability : CVE-2026-99218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coredump: hold RCU while releasing parked threads coredumpfinish releases the parked threads by clearing -task in their corethread entry and calling wakeupproce...

Linux Distros Unpatched Vulnerability : CVE-2026-99237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Hold tracetypeslock when resetting last boot data from readers updatelastdataifempty is called from tracingopen with OTRUNC, tracingreadpipe and...

Photon OS 5.0: Linux PHSA-2026-5.0-91-1013

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : kernel (RHSA-2026:93930)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93930 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ethtool: coalesce: cap profil...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150107 advisory. The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS. T...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150119)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150119 advisory. The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request...

RockyLinux 10 : python-urllib3 (RLSA-2026:85930)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:85930 advisory. urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-97689 urllib3: urllib3: Traffic interception via HTTPS pro...

RHEL 9 : tomcat (RHSA-2026:93469)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93469 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat:...

AlmaLinux 9.2 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792096093)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792096093 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a...

Photon OS 5.0: Python3 PHSA-2026-5.0-92-0976

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0976. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Gzip PHSA-2026-5.0-91-0975

An update of the gzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0975. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Nss PHSA-2026-5.0-91-0965

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0965. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150080 advisory. c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will not be set, as seen when cross...

Photon OS 5.0: Nodejs PHSA-2026-5.0-90-1029

An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1029. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : qt5-qtbase (RHSA-2026:93924)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93924 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1793625180)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793625180 advisory. - Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of ...

Photon OS 5.0: Python3 PHSA-2026-5.0-90-0726

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0726. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1042

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1042. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0967

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0967. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssh PHSA-2026-5.0-92-1050

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1050. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Wireshark PHSA-2026-5.0-91-0986

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0986. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0779

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0779. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : libXi (RHSA-2026:93439)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93439 advisory. X.Org X11 libXi runtime library Security Fixes: libXi: libXi: Arbitrary code execution via oversized DEVICEENABLE reply CVE-2026-109090...

Photon OS 5.0: Open PHSA-2025-5.0-90-0631

An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0631. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0745

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0745. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libxml2 PHSA-2026-5.0-91-1002

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1002. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 8 : nodejs:24 (AXSA:2026-2235:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2235:01 advisory. ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing CVE-2026-101911 brace-expansion: brace-expansion: Denial of Service via...

RHEL 10 : libsoup3 (RHSA-2026:93583)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93583 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup,...

Photon OS 5.0: Linux PHSA-2024-5.0-90-0274

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0274. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CentOS Linux 7 [TuxCare] Security Update: gdb / gdb-doc / gdb-gdbserver (CENTOS7:CLSA-2026:1793203100)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793203100 advisory. - A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component Linker...

Photon OS 5.0: Go PHSA-2026-5.0-91-0991

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0991. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : gimp (RHSA-2026:93589)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93589 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

Photon OS 5.0: Libpng PHSA-2026-5.0-92-0883

An update of the libpng package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0883. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-120057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psqlODBC copies the reply to a large-object read loread into the application's buffer using the length sent by the server, without comparing it to the buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-99241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfsfilemappagemkwrite ntfsfilemappagemkwrite calls...

Linux Distros Unpatched Vulnerability : CVE-2026-99242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: fix race between fallocate and mmap reads The fallocate implementation only takes invalidatelock for punch hole, collapse range, and insert range...