Oracle Linux 10 : libXi (ELSA-2026-93441)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-93441 advisory. - CVE-2026-109089 libXi: libXi: Arbitrary code execution via DEVICERESOLUTION heap-based buffer overflow Resolves: RHEL-293447 Tenable has extracted...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150094 advisory. A OS Command Injection vulnerability exists in Node.js versions 14.21.1, 16.18.1, 18.12.1, 19.0.1 due to an insufficient IsAllowedHost check that can easily be...

Linux Distros Unpatched Vulnerability : CVE-2026-99238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Hold tracetypeslock when updating modules in persistent instances tracemodulerecord walks ftracetracearrays from the module notifier without...

Linux Distros Unpatched Vulnerability : CVE-2026-99230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/cmd: don't leave list poison in -hashnode iouringcmddelcancelable uses hlistdel to take a command off -cancelableuringcmd, which leaves LISTPOISON1/2...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150084 advisory. This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150072)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150072 advisory. c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. Th...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1793625180)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793625180 advisory. - Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a...

Photon OS 5.0: Libtiff PHSA-2026-5.0-91-0936

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0936. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150110 advisory. Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes localhost6. When localhost6 is not present in...

SUSE SLED15 / SLES15 Security Update : python-CairoSVG (SUSE-SU-2026:4949-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4949-1 advisory. This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with...

Photon OS 5.0: Samba PHSA-2026-5.0-90-1033

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1033. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1002

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1002. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-120457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libaec through 1.1.7 contains an out-of-bounds read vulnerability in msedecode in src/decode.c that allows attackers to bypass a signed bounds check via an...

RHEL 9 : postgresql:16 (RHSA-2026:93460)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93460 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: pgvector: pgvector: Arbitrary code execution via...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0944

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0944. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : curl (RHSA-2026:93454)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93454 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...

Photon OS 5.0: Linux PHSA-2026-5.0-91-1014

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1014. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 9 : nodejs:24 (AXSA:2026-2234:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2234:01 advisory. ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing CVE-2026-101911 brace-expansion: brace-expansion: Denial of Service via...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0575

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0575. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : python-jwt (RHSA-2026:93624)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93624 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Unity Linux 20.1060a / 20.1070a Security Update: mysql (UTSA-2026-150125)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150125 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Roles. Supported versions that are affected are 8.0.16 and prior. Easily...

Fedora 43 : janus (2026-010f9a18bb)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-010f9a18bb advisory. Update to v1.4.3 rhbz2549665: Security fixes: - SEC Fix potential buffer overflow in Record&Play plugin PR 3688 - SEC Fix master/helper session switch...

Photon OS 5.0: Openssl PHSA-2026-5.0-91-0969

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0969. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Mariadb PHSA-2026-5.0-90-1027

An update of the mariadb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1027. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : thunderbird (ELSA-2026-93443)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-93443 advisory. 153.5.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 153.5.0-1 - Update to 153.5.0 ESR 140.16.0-1 - Update to 140.16.0 ESR...

Photon OS 5.0: Util PHSA-2026-5.0-92-0999

An update of the util package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0999. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Rubygem PHSA-2026-5.0-90-1055

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1055. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : ghostscript (RHSA-2026:93978)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93978 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats...

Photon OS 5.0: Iperf PHSA-2026-5.0-92-1024

An update of the iperf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2025-5.0-90-0458

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0458. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : nginx (RHSA-2026:93467)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93467 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

Photon OS 5.0: Libssh2 PHSA-2026-5.0-90-0985

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0985. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150078 advisory. This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that...

Linux Distros Unpatched Vulnerability : CVE-2026-99223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: make keyring indexes independent of kernel addresses KEYCTLREAD returns the serial numbers in a keyring in associative-array traversal order. The first wo...

Oracle Linux 10 : pipewire (ELSA-2026-93442)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-93442 advisory. 1.4.11-1.2 - CVE-2026-14330 pipewire: Pulse Server alloca Stack Overflow Resolves: RHEL-296741 Tenable has extracted the preceding description block directly...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1001

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1001. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : freerdp (RHSA-2026:93538)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93538 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

RHEL 10 : podman (RHSA-2026:93464)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93464 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods...

Photon OS 5.0: Krb5 PHSA-2026-5.0-91-0978

An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0978. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-90-0813

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0813. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 8 : gcc (ELSA-2026-89830)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89830 advisory. - Merge Oracle patches to 8.5.0-30. Oracle history: August-26-2025 Qing Zhao 8.5.0-28.0.1 - Merge Oracle patches to 8.5.0-28. March-31-2025 Jose E...

FreeBSD : chromium -- security fixes (3749ce48-d5ce-11f1-9bfa-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3749ce48-d5ce-11f1-9bfa-a8a1599412c6 advisory. Chrome Releases reports: This update includes 21 security fixes: Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-99224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: Protect the type name while describing a key keyctldescribekey must keep the key type's name alive until kasprintf has consumed it. The retained key...

RHEL 8 : python-jwt (RHSA-2026:93780)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93780 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

MiracleLinux 8 : python-pillow-5.1.1-36.el8_10 (AXSA:2026-2231:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2231:03 advisory. pillow: Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO CVE-2026-112393 pillow: Pillow: Heap buffer overflow in FlashPix F...

RHEL 9 : bind (RHSA-2026:93610)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93610 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

Photon OS 4.0: Httpd PHSA-2026-4.0-1084

An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1084. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Imagemagick PHSA-2026-5.0-90-1026

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1026. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 9 : libsoup (RHSA-2026:93445)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93445 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: libsoup: Heap buffer overflow from...

RHEL 8 : perl:5.32 (RHSA-2026:85917)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:85917 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: URI: URI fo...