Linux Distros Unpatched Vulnerability : CVE-2026-79151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted...

Fedora 44 : curl (2026-2f88b83676)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2f88b83676 advisory. - Fix QUIC zero-length UDP datagrams busy-loop CVE-2026-11352 - Fix WS Auto-PONG memory exhaustion CVE-2026-11586 - Fix proto-default skips SSH...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099006)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099006 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: cdcncm: add ndpoffset to NDP32 nframes bounds check The same bounds-check bug fixed for...

Linux Distros Unpatched Vulnerability : CVE-2026-79219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside th...

SUSE SLES15 Security Update : kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3700-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3700-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: -...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098690 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the timer, bu...

Linux Distros Unpatched Vulnerability : CVE-2026-79256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098860)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098860 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath When cifssanitizeprepath is called...

Linux Distros Unpatched Vulnerability : CVE-2026-79117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093180)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093180 advisory. The pngconverttorfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104582 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds i...

Fedora 44 : emacs (2026-60eff202e7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-60eff202e7 advisory. Fix CVE-2026-77219: Integer overflow in PBM/PPM/PGM image loader. Tenable has extracted the preceding description block directly from the Fedora security...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: haproxy (UTSA-2026-104828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104828 advisory. HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that fails to validate the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104762 advisory. H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from the...

FreeBSD : FreeBSD -- Use-after-free in unix SOCK_STREAM message handling (e99e4b19-a0fd-11f1-ae1f-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e99e4b19-a0fd-11f1-ae1f-bc241121aa0a advisory. The SOCKSTREAM receive path in the unix socket implementation failed to fully detach control messages...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098688)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098688 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: x86/aegis - Add missing error checks The skcipherwalk functions can allocate memory and c...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python2 (UTSA-2026-093150)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093150 advisory. Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service resource consumption via a ZIP bomb. Tenable has extracted the preceding...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098961 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: validate DFA start states are in bounds in unpackpdb Start states are read from untrust...

Linux Distros Unpatched Vulnerability : CVE-2026-78980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098846 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5pollone curqp update flow When curqp isn't NULL, in order to avoid fetching th...

Linux Distros Unpatched Vulnerability : CVE-2026-79005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-80588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec mptcp: borrow forward memory from subflow, errors in the receive path prior ...

RockyLinux 9 : golang (RLSA-2026:22121)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22121 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: HikariCP (UTSA-2026-093034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093034 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Linux Distros Unpatched Vulnerability : CVE-2026-80525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from...

Debian dla-4757 : openjdk-17-dbg - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4757 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4757-1 [email protected]...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098709)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098709 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: arptables: fix IEEE1394 ARP payload parsing Weiming Shi says: arppacketmatch...

Linux Distros Unpatched Vulnerability : CVE-2026-79776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can...

Fedora 43 : apr-util (2026-1ba2df871e)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1ba2df871e advisory. - new version 1.6.5 - security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098818 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: do not free existing class in qfqchangeclass Fixes qfqchangeclass error case...

RHEL 9 : golang (RHSA-2026:60304)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60304 advisory. The golang packages provide the Go programming language compiler. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Servic...

RHEL 8 : kernel-rt (RHSA-2026:59737)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59737 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Linux Distros Unpatched Vulnerability : CVE-2026-79267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy...

Linux Distros Unpatched Vulnerability : CVE-2026-78991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098773 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback from inline due to -ENOSPC If we fail to create a...

Linux Distros Unpatched Vulnerability : CVE-2026-79031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061546 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...

SUSE SLED15: libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2026:3684-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3684-1 advisory. - CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. - CVE-2026-27456:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098853 advisory. In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to POWERPC spufs: Fix gang destroy leaks we used to hav...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104815 advisory. In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098879)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098879 advisory. In the Linux kernel, the following vulnerability has been resolved: net: pull headers in qdiscpktlensegsinit Most ndostartxmit methods expects headers of gso packet...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104813 advisory. In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an...

SUSE SLES15 Security Update : kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3717-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3717-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues: The following security issues were fixed:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104777 advisory. Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directl...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: targetcli (UTSA-2026-093622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093622 advisory. Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files. Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-78937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute...

RHEL 8 : postgresql:12 (RHSA-2026:60265)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60265 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Denial of Service via...

Oracle Linux 10 : polkit (ELSA-2026-59997)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59997 advisory. 125-4.0.1.el102.1 - Increase timeout to avoid defunct processes Orabug: 26930744 125-4.1 - NOTICE jrybar: the record 125-4 below was added in manually after...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098669 advisory. An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special...

Linux Distros Unpatched Vulnerability : CVE-2026-78898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access...