Fedora 45 : mstflint (2026-b7ad280cc1)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b7ad280cc1 advisory. Update to upstream release v4.37.0-1.1. Fix licensing issues. For upstream release information, see: https://github.com/Mellanox/mstflint/releases Tenable ha...

Linux Distros Unpatched Vulnerability : CVE-2026-118778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used...

Fedora 45 : mingw-libpng (2026-0c0574dd9a)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0c0574dd9a advisory. Update to libpng-1.6.59, fixes CVE-2026-46675. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : jfrog-cli (2026-22065c06f7)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22065c06f7 advisory. Update to 2.127.0. ---- Update to 2.126.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Fedora 45 : qdl (2026-13d0d9deee)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-13d0d9deee advisory. EPEL9 fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue...

Fedora 45 : mingw-LibRaw (2026-e8eb7f84bb)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e8eb7f84bb advisory. Backport fix for CVE-2026-88387. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : libzip (2026-3523480992)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3523480992 advisory. Version 1.12.1 - 2026-10-14 Protect against denial of service attack advisory GHSA-m3wq-j48p-jxwh, actually fixed in 1.12. Fix compile issues. Fix adding and...

Linux Distros Unpatched Vulnerability : CVE-2026-62965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job management in sabnzbd/api.py accepts the user-controlled value paramet...

Fedora 45 : glib-networking (2026-3a8a4802f0)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3a8a4802f0 advisory. Upstream release consisting mostly of CVE fixes, one of which is high severity CVE-2026-103963 Tenable has extracted the preceding description block directly...

Fedora 45 : clevis-pin-trustee (2026-d68095cc3f)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d68095cc3f advisory. Merge 5 Rebuild for CVE-2026-93600 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : bind9-next (2026-57cc6eadd3)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-57cc6eadd3 advisory. Update to 9.21.26 rhbz2489832 Security Fixes: - Prevent excessive CPU use validating crafted DNSSEC responses. CVE-2026-19668 - Require a TSIG on...

Linux Distros Unpatched Vulnerability : CVE-2026-119720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in readfiledna that reads a GLOB block field without validating its...

Linux Distros Unpatched Vulnerability : CVE-2026-118673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration...

Fedora 45 : python-django5 (2026-36373ca634)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-36373ca634 advisory. Update Django 5 to version 5.2.18 - Fixes CVE-2026-77050 low: Potential denial-of-service vulnerability in getsupportedlanguagevariant - Fixes...

Fedora 45 : libpng15 (2026-fe765b13ce)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fe765b13ce advisory. - fixes CVE-2025-64505 and CVE-2026-33416 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-abi-stablelists / kernel-core / kernel-debug / etc Multiple Vulnerabilities (crxsa-2026_90365)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-202690365 advisory. kernel: udp: Deal with race between UDP socket address change and rehash CVE-2024-57974 kernel: fuse: re-lock request before replacing page cache folio...

Linux Distros Unpatched Vulnerability : CVE-2026-84243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to .....

RHEL 9 : firefox (RHSA-2026:89757)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89757 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libexpat:...

Slackware Linux 15.0 / current libarchive Vulnerability (SSA:2026-304-01)

The version of libarchive installed on the remote host is prior to 3.8.11. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-304-01 advisory. New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

Fedora 45 : nix (2026-d34d705a38)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d34d705a38 advisory. Update to 2.35.3 which addresses: CVE-2026-110450 High, https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56 and other Moderate issues: see...

Fedora 45 : unbound (2026-7b16c1d7fc)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7b16c1d7fc advisory. Update to 1.26.2 rhbz2558169 Security fixes from the upstream changelog: - Fix CVE-2026-97206, DoQ path-migration can lead to use-after-free on...

Linux Distros Unpatched Vulnerability : CVE-2026-118767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char values without...

Fedora 45 : cifs-utils (2026-c3f7378a61)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c3f7378a61 advisory. Fix for CVE-2026-104715. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Microsoft Edge (Chromium) < 156.0.4314.58 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 156.0.4314.58. It is, therefore, affected by multiple vulnerabilities as referenced in the November 4, 2026 advisory. - Incorrect authorization in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker...

Rocky Linux 9.6 [CIQ] Security Update: gdb / gdb-doc / gdb-gdbserver / gdb-headless / gdb-minimal Multiple Vulnerabilities (ciqsa-2026_1735)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261735 advisory. This advisory aggregates security fixes for the gdb SRPM in CIQ LTS 9.6. It addresses 5 CVEs: CVE-2022-48064, CVE-2026-13732, CVE-2006-4146, CVE-2022-480...

Linux Distros Unpatched Vulnerability : CVE-2026-97209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file...

Fedora 45 : python3.10 (2026-3c77f3452a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3c77f3452a advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : log4net / nant (2026-6515ac01d8)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-6515ac01d8 advisory. Update log4net to 3.5.0. Nant is rebuilt only dependency in Fedora. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 45 : perl-Net-Whois-Raw (2026-535e7d2281)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-535e7d2281 advisory. Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. This tool...

Fedora 43 : python-nh3 / rust-ammonia (2026-501e3b2abf)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-501e3b2abf advisory. Update the ammonia crate to version 4.1.8. Rebuild python-nh3 to apply security fixes RUSTSEC-2021-0156, RUSTSEC-2021-0158, RUSTSEC-2026-0373. Tenable has...

Fedora 45 : perl-Plack / perl-Plack-Middleware-ReverseProxy (2026-04e2968a8a)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-04e2968a8a advisory. A number of security issues were found in the Plack stack: SECURITY Fix memory leak of every request env in Plack::Middleware::Recursive...

Linux Distros Unpatched Vulnerability : CVE-2026-118768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocspcheck command requested an OCSP response from a certificate's Authority Informatio...

Fedora 45 : python3.13 (2026-d8c8cbcb0c)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d8c8cbcb0c advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : gcc (2026-589138efb1)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-589138efb1 advisory. Upstream bugs http://gcc.gnu.org/PRNNNNN fixed: 88632, 98573, 99293, 104630, 105594, 107549, 110421, 114065, 114400, 115955, 116547, 117487, 118665,...

Linux Distros Unpatched Vulnerability : CVE-2026-61845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass converts CSS scientific notation number value...

Linux Distros Unpatched Vulnerability : CVE-2026-41216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.6. A specially crafted .png file can lead to ...

FreeBSD : py-djangorestframework -- Multiple vulnerabilities (b0395fb0-d45c-11f1-985e-901b0edee044)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b0395fb0-d45c-11f1-985e-901b0edee044 advisory. Bruno Alla reports: An unauthenticated attacker can defeat Django's DATAUPLOADMAXMEMORYSIZE...

Rocky Linux 9.2 [CIQ] Security Update: pcre2 / pcre2-devel / pcre2-syntax / pcre2-utf16 / pcre2-utf32 Multiple Vulnerabilities (ciqsa-2026_1737)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261737 advisory. This advisory aggregates security fixes for the pcre2 SRPM in CIQ LTS 9.2. It addresses 6 CVEs: CVE-2026-89161, CVE-2016-3191, CVE-2017-8786,...

RHEL 8 : firefox (RHSA-2026:89756)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89756 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libexpat:...

Fedora 44 : python-nh3 / rust-ammonia (2026-481989221d)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-481989221d advisory. Update the ammonia crate to version 4.1.8. Rebuild python-nh3 to apply security fixes RUSTSEC-2021-0156, RUSTSEC-2021-0158, RUSTSEC-2026-0373. Tenable has...

Rocky Linux 9.2 [CIQ] Security Update: rpcbind (ciqsa-2026_1734)

The Rocky Linux 9.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261734 advisory. This advisory aggregates security fixes for the rpcbind SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-94640. Tenable has extracted the preceding description...

Fedora 45 : freeipa / krb5 / samba (2026-01926f9706)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-01926f9706 advisory. Update to Samba 4.25.1 along with freeipa rebuild and security fix CVE-2026-11850 in krb5 Tenable has extracted the preceding description block directly from...

Fedora 45 : libmongocrypt (2026-3a27a30140)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3a27a30140 advisory. Version 1.21.0 Removed - Remove support for the prefixPreview, suffixPreview, and substringPreview query types. Setting them with mongocryptctxsetoptquerytyp...

Linux Distros Unpatched Vulnerability : CVE-2026-118781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used...

Linux Distros Unpatched Vulnerability : CVE-2026-42057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.6. A specially crafted .png file can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-118775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer in lib/asn1.js did not...

Rocky Linux 8 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel Multiple Vulnerabilities (crlsa-2026_92323)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692323 advisory. expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in...

RockyLinux 9 : .NET 9.0 (RLSA-2026:92429)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:92429 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Bug Fixes and Enhancements: Update .NET 9.0 to SD...

Rocky Linux 8 [CIQ] Security Update: aspell / aspell-debuginfo / aspell-debugsource / aspell-devel (crlsa-2026_92615)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202692615 advisory. aspell: aspell: Arbitrary code execution via crafted dictionary file CVE-2026-103658 Tenable has extracted the preceding description block directly from the CIQ...

Fedora 45 : btrfs-backup-ng (2026-344a8310cc)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-344a8310cc advisory. notes=Update to 0.9.18, which carries the 0.9.17 security fix GHSA-5xvm-66c9-p5ph and a fix for a regression in 0.9.17. 0.9.17 was not shipped to this releas...