RockyLinux 10 : firefox (RLSA-2026:89758)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89758 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer...

Fedora 45 : rust-cargo-semver-checks / rust-clap-cargo / rust-tokei / etc (2026-ca950aef8f)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ca950aef8f advisory. Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-034...

Fedora 45 : golang-x-mobile (2026-a8d1970e75)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a8d1970e75 advisory. Upgrade with minor security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-118774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used...

Linux Distros Unpatched Vulnerability : CVE-2026-119364

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in modcopy that allows authenticated FTP users to bypass Limit...

Fedora 45 : libpng12 (2026-9d85027cc0)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d85027cc0 advisory. - fixes CVE-2025-64505 and CVE-2026-33416 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Fedora 45 : barman / python-uv-build / ruff / rust-archive-trait / etc (2026-5a630f968e)

"The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-5a630f968e advisory. Update uv and python-uv-build to version 0.13.5. This includes some breaking changes to uv but none to python-uv-build %NASLMINLEVEL 80900 C Tenable, Inc. T...

Linux Distros Unpatched Vulnerability : CVE-2026-116127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection. The reque...

Fedora 45 : python3.14 (2026-3949050315)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3949050315 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

AlmaLinux 9 : bind9.18 (ALSA-2026:93072)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93072 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP messa...

Fedora 45 : librabbitmq (2026-ba337bb099)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ba337bb099 advisory. Version 0.18.1 - 2026-10-12 Security - Fix heap buffer over-read in amqpreadmessage when a content header frame with a non-basic class id is received;...

FreeBSD : metasploit -- multiple vulnerabilities (4488c0db-d45b-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4488c0db-d45b-11f1-bae2-3497f65b111b advisory. Rapid7 published security advisories for issues fixed in releases 6.5.2 through 6.5.7. The...

Rocky Linux 9 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2026_91580)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202691580 advisory. chromium-browser: angle: Use after free in ANGLE CVE-2026-95325 chromium-browser: angle: Out of bounds write in ANGLE CVE-2026-95331 chromium-browser:...

Fedora 45 : exim (2026-3f88ddbd83)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3f88ddbd83 advisory. This is new version of exim fixing CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057. Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: libXtst / libXtst-debuginfo / libXtst-debugsource / libXtst-devel (crlsa-2026_91223)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202691223 advisory. libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286 Tenable has extracted the preceding description block directly fro...

FreeBSD : OpenResty -- multiple vulnerabilities in the bundled nginx core (4d4c2b6e-d433-11f1-a215-a0369f7f7be0)

"The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4d4c2b6e-d433-11f1-a215-a0369f7f7be0 advisory. The OpenResty developers report: The nginx core was upgraded from nginx 1.31.1 to 1.31.8, whi...

Fedora 45 : perl-Badger / perl-CLI-Simple / perl-CSS-Inliner / etc (2026-719dc03ab9)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-719dc03ab9 advisory. Update to rt 5.0.10 Fixes CVE-2025-61873 CVE-2026-41075 CVE-2026-41076 CVE-2026-6841 CVE-2026-44231 CVE-2026-44229 CVE-2026-44230 Tenable has...

Fedora 45 : knot-resolver (2026-4ba65028d5)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4ba65028d5 advisory. New upstream release with security updates. See release information for details. ---- New upstream release. Tenable has extracted the preceding description...

FreeBSD : MySQL 8.4 -- Multiple vulnerabilities (24aa62d3-d452-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24aa62d3-d452-11f1-bae2-3497f65b111b advisory. Oracle reports: The October 2026 Critical Patch Update contains 98 new security patches for...

Fedora 44 : rust-cargo-semver-checks / rust-trustfall-rustdoc-adapter / etc (2026-8e6e09deb9)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-8e6e09deb9 advisory. Rebuild cargo-semver-checks with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349, with faster-hex 0.10.1 fo...

Rocky Linux 9 [CIQ] Security Update: ignition / ignition-debuginfo / ignition-debugsource / etc (crlsa-2026_91719)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202691719 advisory. crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates CVE-2026-111943 Tenable has extracted the preceding description...

Fedora 45 : Lmod (2026-bf8b87b8f5)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bf8b87b8f5 advisory. Update to 9.4.2 CVE-2026-85013 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

AlmaLinux 8 : python-pillow (ALSA-2026:93077)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:93077 advisory. pillow: Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO CVE-2026-112393 pillow: Pillow: Heap buffer overflow in FlashPix FPX JP...

RockyLinux 9 : firefox (RLSA-2026:89757)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89757 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: thunderbird: Privilege escalation in the Application Update component...

Linux Distros Unpatched Vulnerability : CVE-2026-119168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to...

Fedora 45 : clevis (2026-543870a26c)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-543870a26c advisory. Merge 55 Add new sources release 23 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Linux Distros Unpatched Vulnerability : CVE-2026-119146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the modrewrite int:utf8trans RewriteMap that allows remote attackers to overwrit...

RHEL 10 : firefox (RHSA-2026:89758)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89758 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libexpat:...

Rocky Linux 9.6 [CIQ] Security Update: python3-unbound / unbound / unbound-devel / unbound-dracut / etc Multiple Vulnerabilities (ciqsa-2026_1739)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261739 advisory. This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.6. It addresses 3 CVEs: CVE-2026-81634, CVE-2026-44690, CVE-2026-81642. Tenable...

Fedora 45 : zchunk (2026-edde89c556)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-edde89c556 advisory. Update to 1.5.5, fixing a number of bugs around memory usage and correctness Tenable has extracted the preceding description block directly from the Fedora...

Linux Distros Unpatched Vulnerability : CVE-2026-115865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory. The request body is read in a loop...

Oracle Linux 8 : pki-deps:10.6 (ELSA-2026-90909)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90909 advisory. - Fix CVE-2026-68498 - Fix CVE-2026-89425 - Fix CVE-2026-91777 - Disallow EventData deserialization by default CVE-2018-8088 Tenable has extracted the...

Fedora 45 : perl-Text-CSV_XS (2026-c4f1537d44)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c4f1537d44 advisory. Current upstream release, with several security fixes. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 45 : python-pydantic-core (2026-7a9f67924e)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a9f67924e advisory. Update lru to 0.18.2 for RUSTSEC-2026-0253. Allow jiter 0.18. Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 45 : perl-Cpanel-JSON-XS (2026-ad8dfeadc9)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ad8dfeadc9 advisory. Current upstream release, with multiple security fixes, updates for performance and correctness. Tenable has extracted the preceding description blo...

Linux Distros Unpatched Vulnerability : CVE-2026-119341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw- reads an ADAPTCLASSSTRUCT from a pre-adapted-template...

Linux Distros Unpatched Vulnerability : CVE-2026-116130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and...

Fedora 45 : trafficserver (2026-84f58bb437)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84f58bb437 advisory. Changes with Apache Traffic Server 10.2.1 - \13553 - originserverauth: Improve log messages - \13567 - Metrics: Revert added locking and annotations...

Linux Distros Unpatched Vulnerability : CVE-2026-114508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc (crlsa-2026_92427)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202692427 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Bug Fixes and Enhancements: Update .NET 9.0 to SDK...

Fedora 45 : libinstpatch (2026-b2192a44f4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b2192a44f4 advisory. Update to 1.1.8, including fixes for CVE-2026-111136 and for a memory leak. Tenable has extracted the preceding description block directly from the Fedora...

Linux Distros Unpatched Vulnerability : CVE-2026-61847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when the :preservecomments option is not enabled,...

Linux Distros Unpatched Vulnerability : CVE-2026-61848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, when Crass parses input containing non-ASCII...

Fedora 45 : nodejs-pnpm12 (2026-d4c5923953)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4c5923953 advisory. Initial package version 12.4.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 45 : python-cairosvg (2026-6805620549)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6805620549 advisory. Update to 2.9.1 upstream release CVE-2026-107378 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 44 : rustup (2026-dabbed40d7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dabbed40d7 advisory. Rebuilt with rustls v0.23.46 - Fixes RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349. Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-91920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encoding in HTTP requests. The issue occurs...

Rocky Linux 9 [CIQ] Security Update: libXi / libXi-debuginfo / libXi-debugsource / libXi-devel (crlsa-2026_91056)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202691056 advisory. libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser CVE-2026-93543 Tenable has extracted the preceding description block directly from the C...

Linux Distros Unpatched Vulnerability : CVE-2026-107050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker- supplied code in their uid, leading to arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-61846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, Crass recursively parses CSS simple blocks and...