Linux Distros Unpatched Vulnerability : CVE-2026-99241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidatelock in ntfsfilemappagemkwrite ntfsfilemappagemkwrite calls...

Linux Distros Unpatched Vulnerability : CVE-2026-99242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: fix race between fallocate and mmap reads The fallocate implementation only takes invalidatelock for punch hole, collapse range, and insert range...

Linux Distros Unpatched Vulnerability : CVE-2026-99221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys/trustedkeys: return immediately after TPM unseal failure trustedtpmunseal proceeds to pcrlock when the TPM unseal operation fails. If pcrlock succeeds, its...

Linux Distros Unpatched Vulnerability : CVE-2026-99233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing/histograms: Verify eventcall identity when updating synthevent refcount In eventhisttriggerparse and histunregall, the histogram registration and...

Linux Distros Unpatched Vulnerability : CVE-2026-99225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: Check the authorization payload in process keyring searches An authorization payload and its saved credentials must remain valid while...

Linux Distros Unpatched Vulnerability : CVE-2026-120059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by the server, into a...

Oracle Linux 7 : python-pyasn1 (ELSA-2026-59240)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59240 advisory. - Fix CVE-2026-59886 Real float conversion Orabug: 39925524 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Linux Distros Unpatched Vulnerability : CVE-2026-99217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fork: release the files of a failed fork after schedcancelfork Reorder copyprocess cleanup so schedfork taking scxforkrwsem scxprefork is safe and isn't held...

Photon OS 5.0: Python3 PHSA-2026-5.0-91-0997

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0997. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-90-1034

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1034. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : glibc (ELSA-2026-79281)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-79281 advisory. - CVE-2026-77117: Non-progress DoS in SHIFTJISX0213 decoding RHEL-248058 - CVE-2026-80489: Non-progress DoS in EUCJISX0213 decoding RHEL-249636 -...

Linux Distros Unpatched Vulnerability : CVE-2026-104062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to...

Photon OS 5.0: Linux PHSA-2024-5.0-90-0393

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0393. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 10 : .NET / 9.0 (ELSA-2026-92430)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92430 advisory. 9.0.123-1.0.1 - Add support for Oracle Linux 9.0.123-1 - Update to .NET SDK 9.0.123 and Runtime 9.0.22 - Resolves: RHEL-291728 Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-99234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Unregister field variable histograms when the command fails An action that names a field on another event needs that field as a variable, so...

Photon OS 4.0: Iperf PHSA-2026-4.0-1083

An update of the iperf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1083. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : java-17-openjdk (ELSA-2026-90500)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90500 advisory. 1:17.0.21.0.9-2.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.21.0.9-2.2 - Set rpmrelease to 2 for PQC signing 1:17.0.21.0.9-2.1 - Set...

Photon OS 5.0: Python3 PHSA-2026-5.0-92-0997

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0997. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Mysql PHSA-2026-5.0-92-1047

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1047. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssh PHSA-2025-5.0-90-0687

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0687. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Perl PHSA-2026-5.0-91-0946

An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Rsyslog PHSA-2026-5.0-91-1014

An update of the rsyslog package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1008

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1008. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 10 : grafana (ELSA-2026-89751)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89751 advisory. - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting in Unified Alerting - Resolves RHEL-253142: CVE-2026-1581...

RHEL 8 : freerdp (RHSA-2026:93549)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93549 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Photon OS 5.0: Python3 PHSA-2026-5.0-91-0991

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0991. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Dotnet PHSA-2026-5.0-92-1008

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1008. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 45 : tpm2-tss (2026-14beb0815b)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-14beb0815b advisory. Security GHSA-h664-qxhh-gx3w CVE-2026-109545 GHSA-2q8j-chww-3pcq CVE-ID requested GHSA-5mqr-9575-x89w CVE-ID requested GHSA-rjg6-phr3-3rxw CVE-ID requested...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150108 advisory. c-ares is an asynchronous resolver library. aresinetnetpton is vulnerable to a buffer underflow for certain ipv6 addresses, in particular 0::00:00:00/2 was found to...

CentOS Linux 7 [TuxCare] Security Update: librsvg2 / librsvg2-devel / librsvg2-tools (CENTOS7:CLSA-2026:1793206266)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793206266 advisory. - A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a...

Photon OS 5.0: Util PHSA-2026-5.0-91-0999

An update of the util package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0999. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AlmaLinux 8 : kernel-rt (ALSA-2026:93437)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93437 advisory. kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option CVE-2026-63922...

Fedora 44 : rust-rpki (2026-2c5368407a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2c5368407a advisory. Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0285, RUSTSEC-2026-0346,...

Fedora 43 : rust-sequoia-git (2026-5f4ada201e)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5f4ada201e advisory. Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities...

Photon OS 5.0: Openssl PHSA-2026-5.0-91-0982

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0982. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150089 advisory. The use of module.constructor.createRequire can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This...

SUSE SLES15 Security Update : suseconnect-ng (SUSE-SU-2026:4950-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4950-1 advisory. This update for suseconnect-ng rebuilds it against the current go security release. Tenable has extracted the preceding description block...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0982

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0982. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Netkit PHSA-2025-5.0-90-0666

An update of the netkit package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0666. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Postgresql15 PHSA-2026-5.0-90-1039

An update of the postgresql15 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1039. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2026-5.0-91-0976

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0976. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1060a / 20.1070a Security Update: mysql (UTSA-2026-150120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150120 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 8.0.16 and prior. Difficult to exploit...

Linux Distros Unpatched Vulnerability : CVE-2026-99219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ftrace: Initialize modname and offset in printrec printrec leaves 'modname' and 'offset' uninitialized and kallsymslookup only sets them on success. When the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150097)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150097 advisory. When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate API a non-expect termination occurs making it susceptible to DoS...

Fedora 45 : rust-rbspy (2026-8ddaaca009)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ddaaca009 advisory. Rebuild rbspy with newer versions of the ruzstd, memmap2, anyhow, and quick-xml crates to address multiple security vulnerabilities RUSTSEC-2026-0186,...

Photon OS 5.0: Python3 PHSA-2026-5.0-92-0991

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0991. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssh PHSA-2026-5.0-90-0830

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0830. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : libXi (ELSA-2026-93439)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93439 advisory. - CVE-2026-109089 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow Resolves: RHEL-293452 Tenable has extracted t...

RHEL 10 : util-linux (RHSA-2026:93461)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93461 advisory. The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among...

Fedora 44 : ntpd-rs (2026-3f206513bb)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3f206513bb advisory. Rebuild ntpd-rs with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0049, RUSTSEC-2026-0098,...