Fedora 44 : rust-rbspy (2026-853758be1f)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-853758be1f advisory. Rebuild rbspy with newer versions of the ruzstd, memmap2, anyhow, and quick-xml crates to address multiple security vulnerabilities RUSTSEC-2026-0186,...

Photon OS 5.0: Dotnet PHSA-2026-5.0-90-1027

An update of the dotnet package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1027. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Unbound PHSA-2026-5.0-91-1013

An update of the unbound package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: P11 PHSA-2026-5.0-92-1028

An update of the p11 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1028. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Lz4 PHSA-2025-5.0-91-0677

An update of the lz4 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0677. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 10 : perl-HTTP-Daemon (RHSA-2026:93585)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93585 advisory. The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 server...

Photon OS 5.0: Rubygem PHSA-2026-5.0-90-1031

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1031. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : perl-XML-LibXML (RHSA-2026:93470)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:93470 advisory. This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module...

Unity Linux 20.1060a / 20.1070a Security Update: mysql (UTSA-2026-150124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150124 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily...

Photon OS 5.0: Glib PHSA-2026-5.0-90-0953

An update of the glib package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0953. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Linux PHSA-2026-4.0-1068

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1068. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : libsoup (RHSA-2026:93466)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93466 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: libsoup: Heap buffer overflow from...

Fedora 43 : ntpd-rs (2026-a9929d5b4b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a9929d5b4b advisory. Rebuild ntpd-rs with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0049, RUSTSEC-2026-0098,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150115 advisory. An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in t...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150121 advisory. A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that...

Photon OS 4.0: Rubygem PHSA-2026-4.0-1018

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1018. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0960

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Alibaba Cloud Linux 3 : 0334: kernel (ALINUX3-SA-2026:0334)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0334 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-98432: In the Linux kernel, the following...

Oracle Linux 8 : kernel (ELSA-2026-93414)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-93414 advisory. - ipv4: free inetopt and ireqopt after an RCU grace period Davide Caratti RHEL-295615 CVE-2026-98432 - smb: client: bound dirent name against end of SMB respon...

RHEL 10 : kernel (RHSA-2026:93775)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:93775 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: free inetopt and ireqopt after ...

CentOS Linux 7 [TuxCare] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xephyr / etc (CENTOS7:CLSA-2026:1793211321)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793211321 advisory. - A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and...

Photon OS 5.0: Curl PHSA-2026-5.0-91-1008

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-1008. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : idm:client (RHSA-2026:93452)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93452 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and...

Cisco NX-OS Software Command Injection (cisco-sa-nxos-cmdinj-qhNze5Ss)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit...

Unity Linux 20.1060a / 20.1070a Security Update: mysql (UTSA-2026-150099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150099 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily...

Linux Distros Unpatched Vulnerability : CVE-2026-19741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zephyr's OpenThread integration defined CONFIGOPENTHREADJOINERPSKD with default J01NME in modules/openthread/Kconfig.thread previously...

RHEL 10 : flatpak (RHSA-2026:92221)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92221 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak:...

Photon OS 5.0: Python3 PHSA-2024-5.0-90-0332

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-90-0332. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : kernel-rt (RHSA-2026:93437)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93437 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

CentOS Linux 7 [TuxCare] Security Update: gvfs / gvfs-afc / gvfs-afp / gvfs-archive / gvfs-client / etc (CENTOS7:CLSA-2026:1793265674)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793265674 advisory. - A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process ...

Photon OS 5.0: Python3 PHSA-2026-5.0-91-0973

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0973. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Rocky Linux 8 [CIQ] Security Update: python-pillow-debuginfo / python-pillow-debugsource / etc Multiple Vulnerabilities (crlsa-2026_93077)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202693077 advisory. pillow: Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO CVE-2026-112393 pillow: Pillow: Heap buffer overflow in FlashPix FPX JPE...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150111 advisory. When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate API a non-expect termination occurs making it susceptible to DoS...

RHEL 8 : perl-YAML:1.24 (RHSA-2026:93471)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:93471 advisory. he perl-YAML package provides the pure-Perl implementation of the YAML YAML Ain't Markup Language data serialization standard. It allows...

Photon OS 5.0: Rsync PHSA-2026-5.0-91-0991

An update of the rsync package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0991. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-120740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses...

Fedora 44 : rust-sequoia-octopus-librnp (2026-8c55616ef5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8c55616ef5 advisory. Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150086 advisory. The use of proto in process.mainModule.proto.require can bypass the policy mechanism and require modules outside of the policy.json definition. This vulnerability...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150081 advisory. The generateKeys API function returned from crypto.createDiffieHellman only generates missing or outdated keys, that is, it only generates a private key if none has...

Photon OS 5.0: Nasm PHSA-2026-5.0-91-0925

An update of the nasm package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0925. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 45 : rust-sequoia-octopus-librnp (2026-5ce9fe53f3)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5ce9fe53f3 advisory. Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities...

Photon OS 5.0: Nss PHSA-2023-5.0-90-0006

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-90-0006. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 44 : rust-sequoia-chameleon-gnupg (2026-cf35acb006)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cf35acb006 advisory. Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities RUSTSEC-2026-0285, RUSTSEC-2026-0346,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-150101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150101 advisory. A vulnerability was found in the minimatch package. This flaw allows a Regular Expression Denial of Service ReDoS when calling the braceExpand function with specific...

MiracleLinux 8 : aspell-0.60.6.1-23.el8_10 (AXSA:2026-2230:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2230:01 advisory. aspell: aspell: Arbitrary code execution via crafted dictionary file CVE-2026-103658 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-99227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/waitid: prevent cancel reference wrap iowaitid packs the cancellation state into bit 31 of -refs and uses bits 30:0 as a 31-bit reference counter: defin...

Oracle Solaris Critical Patch Update : oct2026_SRU11_4_94_221_2

The version of Solaris installed on the remote host is prior to 11.4.94.221.2. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11oct2026SRU114942212 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. Supported versions...

Unity Linux 20.1060a / 20.1070a Security Update: mysql (UTSA-2026-150123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150123 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Audit. Supported versions that are affected are 5.6.44 and prior, 5.7.26...

Photon OS 5.0: Curl PHSA-2026-5.0-92-1008

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1008. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CentOS Linux 7 [TuxCare] Security Update: kbd / kbd-legacy / kbd-misc (CENTOS7:CLSA-2026:1793289377)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793289377 advisory. - openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented...