Linux Distros Unpatched Vulnerability : CVE-2026-119190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge parsed deprecated extension OIDs...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc (crlsa-2026_92438)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202692438 advisory. dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-114148 Bug Fixes and Enhancements: Update .NET 10.0 to...

Fedora 45 : python-django6 (2026-c221dbc190)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c221dbc190 advisory. Update Django 6 to version 6.1.2 - Fixes CVE-2026-77050 low: Potential denial-of-service vulnerability in getsupportedlanguagevariant - Fixes...

Fedora 43 : rust-cargo-semver-checks / rust-trustfall-rustdoc-adapter / etc (2026-6b7650cc3c)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-6b7650cc3c advisory. Rebuild cargo-semver-checks with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349, with faster-hex 0.10.1 fo...

Linux Distros Unpatched Vulnerability : CVE-2026-106972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through...

Fedora 45 : helix / rust-dua-cli / rust-gengo-bin / rust-gitui / rust-onefetch / etc (2026-03b88adb99)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-03b88adb99 advisory. Rebuilt several packages with faster-hex version 0.10.1 to fix RUSTSEC-2026-0306, an unsoundness issue on x86 and x8664 when AVX2 is enabled. Backported the...

Fedora 43 : chromium (2026-5a48e58a5e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5a48e58a5e advisory. Update to 156.0.8078.73, include 52 security fixes CVE-2026-118304: Improper input validation in SVG CVE-2026-118305: Memory corruption in Turbolev...

Fedora 45 : chromium (2026-9d6fc6be6c)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d6fc6be6c advisory. Update to 156.0.8078.73, include 52 security fixes CVE-2026-118304: Improper input validation in SVG CVE-2026-118305: Memory corruption in Turbolev...

Fedora 44 : chromium (2026-9418af6472)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9418af6472 advisory. Update to 156.0.8078.73, include 52 security fixes CVE-2026-118304: Improper input validation in SVG CVE-2026-118305: Memory corruption in Turbolev...

Fedora 45 : curl (2026-b60c369f26)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b60c369f26 advisory. - fix OpenLDAP SASL authentication bypass CVE-2026-13608 - fix OpenSSL pinning bypass CVE-2026-80230 ---- - fix secure cookie attribute bypass with...

Oracle Linux 8 : nodejs:24 (ELSA-2026-92376)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-92376 advisory. - Fix out-of-bounds write in bundled Brotli decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the Oracle Lin...

Linux Distros Unpatched Vulnerability : CVE-2026-118776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used...

Linux Distros Unpatched Vulnerability : CVE-2026-119760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolvcancel that allows remote unauthenticated attackers to crash the daemon by...

Fedora 45 : unshield (2026-d79a7cf59b)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d79a7cf59b advisory. Validate the file table against the header size Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : keepassxc (2026-4d8f0cddef)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4d8f0cddef advisory. 2.8.0 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Linux Distros Unpatched Vulnerability : CVE-2026-61725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sevenz-rust2 is a Rust-native 7z compressor and decompressor. Prior to 0.21.1, extracting an attacker- supplied 7z archive can write or overwrite files outside...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2026_92209)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202692209 advisory. kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling CVE-2026-72288 kernel: KVM: arm64: vgic: Check the interrupt is...

Fedora 43 : rustup (2026-abaa7b5b1e)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-abaa7b5b1e advisory. Rebuilt with rustls v0.23.46 - Fixes RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, and RUSTSEC-2026-0349. Tenable has extracted the preceding...

FreeBSD : Routinator -- multiple vulnerabilities (6dc20034-d4a7-11f1-9893-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6dc20034-d4a7-11f1-9893-3c7c3fba4204 advisory. Routinator Team reports: Tenable has extracted the preceding description block directly from t...

Fedora 45 : hcloud (2026-838b95d839)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-838b95d839 advisory. Update to 1.69.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 45 : php-pecl-mongodb2 (2026-ce7737d311)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ce7737d311 advisory. Version 2.5.5 Release Highlights - PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON - PHPC-276: Enforce the decode nesting limit...

Fedora 45 : rust-faster-hex (2026-d93099258e)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d93099258e advisory. Update to version 0.10.1. This includes a fix for a potential buffer overflow assigned RUSTSEC-2026-0306. Rebuilds of affected applications are tracked in...

Linux Distros Unpatched Vulnerability : CVE-2026-118782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12...

Oracle Linux 8 : httpd:2.4 (ELSA-2026-92616)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-92616 advisory. - Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server modproxyajp: Arbitrary code execution via heap-based buffer overflow CVE-2026-28780 -...

Linux Distros Unpatched Vulnerability : CVE-2026-118777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and...

Fedora 45 : firefox (2026-40997bb156)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-40997bb156 advisory. - Updated to latest upstream 159.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2026-115866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request bodies. A chunk-size line...

FreeBSD : sqlite3 -- multiple vulnerabilities (84cd82e1-d49f-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 84cd82e1-d49f-11f1-bae2-3497f65b111b advisory. VulnCheck reports: Ten vulnerabilities fixed in SQLite 3.54.0 were published on 2026-10-30. Fo...

Linux Distros Unpatched Vulnerability : CVE-2026-119286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate reuses a module-level ValidationAbortedError when a...

Fedora 45 : webkitgtk (2026-e5dca6eef4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e5dca6eef4 advisory. Update to version 2.54.2. - Fix performance when compositing layers with backdrop filters. - Fix prewarmed web process leak when they are rejected due to...

Fedora 45 : mongo-c-driver (2026-54d95e524b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-54d95e524b advisory. libbson 2.5.6 - Fix edge case in Decimal128 parsing. CVE-2026-106438 - Enforce minimum size in bsonreservebuffer. CVE-2026-106437 - Fix bsonwriterne...

Fedora 45 : 7zip (2026-b846e78baf)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b846e78baf advisory. Some bugs and vulnerabilities were fixed Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Debian dla-4872 : python-git-doc - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4872 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4872-1 [email protected]...

Fedora 45 : stargz-snapshotter (2026-7dfdd0e080)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7dfdd0e080 advisory. Release of stargz snapshotter v0.19.0, containing fixes for CVE-2026-71482 and CVE-2026-77395. Release note is available on...

Linux Distros Unpatched Vulnerability : CVE-2026-119147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the modsftp copy-file extension handler that skips Limit WRITE checks for new destinatio...

Fedora 45 : freerdp (2026-b00e938d06)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b00e938d06 advisory. Update to 3.32.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : python-boto3 / python-botocore (2026-443272dc0d)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-443272dc0d advisory. Latest updates. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-109821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a...

Fedora 45 : rust-rbw / rust-routinator / rust-rustls (2026-4685ebea4f)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-4685ebea4f advisory. Update rustls to version 0.23.46. This includes fixes for four security vulnerabilities: - RUSTSEC-2026-0346 - RUSTSEC-2026-0347 - RUSTSEC-2026-0348 -...

Fedora 45 : syncthing (2026-773e644d9d)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-773e644d9d advisory. Update to version 2.1.6. Release notes: - https://github.com/syncthing/syncthing/releases/tag/v2.1.4 -...

Fedora 45 : qt5-qtbase (2026-2ae512a6d5)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2ae512a6d5 advisory. Fix CVE-2026-19248, denial of Service vulnerability in XML parsing Tenable has extracted the preceding description block directly from the Fedora security...

Rocky Linux 10.2 [CIQ] Security Update: libX11 / libX11-common / libX11-debuginfo / libX11-debugsource / etc (crlsa-2026_91366)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202691366 advisory. libX11: libX11: Heap-based buffer overflow via malicious X server CVE-2026-88806 Tenable has extracted the preceding description block directly from the CIQ...

Linux Distros Unpatched Vulnerability : CVE-2026-8824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk versions: 9.6.1. A specially crafted .bmp file can...

FreeBSD : phpMyAdmin -- Multiple vulnerabilities, no fix available (e6b90d23-d49d-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e6b90d23-d49d-11f1-bae2-3497f65b111b advisory. VulnCheck reports: Seven vulnerabilities in phpMyAdmin up to and including 5.2.3 were publishe...

Fedora 45 : socat (2026-ddab5501ea)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ddab5501ea advisory. - Update to 1.8.1.3 rhbz2492929 - Fix for CVE-2026-56123 rhbz2535043 Tenable has extracted the preceding description block directly from the Fedora security...

Linux Distros Unpatched Vulnerability : CVE-2026-118765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeededRNG::clear and then calls randomize with an empty output buffe...

Fedora 45 : openbao (2026-c0f7a19ee3)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c0f7a19ee3 advisory. Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4 ---- Update to 2.6.3-2. Fixes...

Fedora 45 : libheif (2026-d28ea22f26)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d28ea22f26 advisory. Latest upstream security bugfix release. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.7 . ---- Update libheif to 1.23.6 Yet another...

Fedora 45 : python-pypdf (2026-fffa0647d3)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fffa0647d3 advisory. Update pypdf to 6.20.1. This update fixes several security issues that could let specially crafted PDF files make applications using pypdf hang or use too mu...

Fedora 45 : mingw-python-certifi (2026-f7c7c6a7de)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f7c7c6a7de advisory. Update to certifi-2026.10.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...