RHEL 8 : webkit2gtk3 (RHSA-2026:92339)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92339 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia:...

Linux Distros Unpatched Vulnerability : CVE-2026-119208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory when an application accesses the page coun...

CentOS Linux 6 [TuxCare] Security Update: c-ares / c-ares-devel Multiple Vulnerabilities (CENTOS6:CLSA-2026:1793082403)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1793082403 advisory. - Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-119197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and...

RHEL 10 : ansible-collection-redhat-leapp (RHSA-2026:91491)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:91491 advisory. redhat.leapp Ansible collection that handles RHEL upgrades. Security Fixes: ansible-collection-redhat-leapp:...

Rocky Linux 10.2 [CIQ] Security Update: libXrender / libXrender-debuginfo / libXrender-debugsource / etc (crlsa-2026_91003)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202691003 advisory. libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats CVE-2026-88807 Tenable has extracted the preceding description block directly...

Rocky Linux 8 [CIQ] Security Update: libXrender / libXrender-debuginfo / libXrender-debugsource / etc (crlsa-2026_91267)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202691267 advisory. libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats CVE-2026-88807 Tenable has extracted the preceding description block directly fr...

Linux Distros Unpatched Vulnerability : CVE-2026-108271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108271 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Fedora 44 : trafficserver (2026-56b692bd7b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-56b692bd7b advisory. Changes with Apache Traffic Server 10.2.1 13553 - originserverauth: Improve log messages 13567 - Metrics: Revert added locking and annotations 13505 - Add...

RHEL 8 : firefox (RHSA-2026:92228)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:92228 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

RHEL 9 : webkit2gtk3 (RHSA-2026:92216)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92216 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia:...

Linux Distros Unpatched Vulnerability : CVE-2026-118475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chun...

CentOS Linux 7 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc (CENTOS7:CLSA-2026:1793106820)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793106820 advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory...

CentOS Linux 7 [TuxCare] Security Update: corosync / corosync-qdevice / corosync-qnetd / corosynclib / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1793105177)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1793105177 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in...

Rocky Linux 9 [CIQ] Security Update: java-25-openjdk / java-25-openjdk-crypto-adapter / etc Multiple Vulnerabilities (crlsa-2026_88347)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688347 advisory. JDK: Enhance PKCS5 padding CVE-2026-83374 JDK: Enhance TLS certificate handling CVE-2026-83376 JDK: Improve C2 loop transformations CVE-2026-83378 JDK:...

Linux Distros Unpatched Vulnerability : CVE-2026-119279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.10, the...

Amazon Linux 2 : tomcat-native (ALAS-2026-4058)

The version of tomcat-native installed on the remote host is prior to 1.2.38-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4058 advisory. Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS vi...

Linux Distros Unpatched Vulnerability : CVE-2026-119265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a...

SUSE SLES16 Security Update : kernel (Live Patch 13 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24447-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24447-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues...

CentOS Linux 8.4 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS8.4:CLSA-2026:1793360958)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793360958 advisory. - Python has added a denylist for known compromised certificates to the ssl module to ensure user safety even without certificate revocation...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2026-3355)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3355 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growth when OpenSSL cachesX.509 extensions. Impact summary: Receiving a crafted...

Rocky Linux 9.6 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc (ALMALINUX9.6:CLSA-2026:1793357369)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793357369 advisory. - Python has added a denylist for known compromised certificates to the ssl module to ensure user safety even without certificate revocatio...

Linux Distros Unpatched Vulnerability : CVE-2026-119141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious Wasm modules to panic the host because t...

Linux Distros Unpatched Vulnerability : CVE-2026-119283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.5, joserfc.jwe.decryptjso...

Linux Distros Unpatched Vulnerability : CVE-2026-119269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

RHEL 10 : dogtag-pki (RHSA-2026:92408)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92408 advisory. IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the...

RHEL 9 : flatpak (RHSA-2026:92369)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92369 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak:...

Amazon Linux 2023 : aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0 (ALAS2023-2026-3366)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3366 advisory. Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network. CVE-2026-102870 Allocation of resources without limits o...

RHEL 8 / 9 : java-21-openjdk security update for RHEL 8 and 9 (Important) (RHSA-2026:88349)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88349 advisory. The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixe...

Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2026-3338)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3338 advisory. GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp- user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an...

Linux Distros Unpatched Vulnerability : CVE-2026-108363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108363 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

RockyLinux 10 : bind (RLSA-2026:92419)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:92419 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP...

Linux Distros Unpatched Vulnerability : CVE-2026-119135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as a different Rust item type than it was created wit...

RHEL 10 : libX11 (RHSA-2026:91366)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:91366 advisory. The libX11 packages contain the core X11 protocol client library. Security Fixes: libX11: libX11: Heap-based buffer overflow via malicious X server...

CentOS Linux 7 [TuxCare] Security Update: python / python-debug / python-devel / python-libs / python-test / etc (CENTOS7:CLSA-2026:1793104227)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793104227 advisory. - bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the sa...

Linux Distros Unpatched Vulnerability : CVE-2026-114690

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search implementation due to an undersized internal buffe...

RHEL 9 : ansible-collection-redhat-leapp (RHSA-2026:91490)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:91490 advisory. redhat.leapp Ansible collection that handles RHEL upgrades. Security Fixes: ansible-collection-redhat-leapp: ansible-collection-redhat-leap...

Linux Distros Unpatched Vulnerability : CVE-2026-119777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing...

CentOS Linux 8.4 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc (CENTOS8.4:CLSA-2026:1793354350)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793354350 advisory. - Python has added a denylist for known compromised certificates to the ssl module to ensure user safety even without certificate revocation...

Linux Distros Unpatched Vulnerability : CVE-2026-118244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML whe...

SUSE SLES16 Security Update : kernel (Live Patch 1 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24458-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24458-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues we...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4937-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4937-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: -...

Linux Distros Unpatched Vulnerability : CVE-2026-119261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox vi...

RHEL 9 : xdg-dbus-proxy (RHSA-2026:91624)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:91624 advisory. xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone...

Linux Distros Unpatched Vulnerability : CVE-2026-119193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory logic in src/Runner/Phpt/TestCase.php creates temporary...

Linux Distros Unpatched Vulnerability : CVE-2026-119260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

IBM MQ 9.4.0.0 < 9.4.0.30 LTS / 9.4.1.0 < 9.4.5.4 CD / 10.0.0.0 < 10.0.0.6 (7284695)

The version of IBM MQ Server running on the remote host is 9.4.0.0 through 9.4.0.26 LTS, 9.4.1.0 through 9.4.5.3 CD, or 10.0.0.0 through 10.0.0.5. It is, therefore, affected by a vulnerability as referenced in the 7284695 advisory. - IBM MQ could allow an authenticated attacker to cause a denial ...

CentOS Linux 6 [TuxCare] Security Update: python-setuptools Multiple Vulnerabilities (CENTOS6:CLSA-2026:1793083722)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1793083722 advisory. - Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3365)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3365 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Tenable has extracted the preceding description block directl...

Amazon Linux 2 : kernel (ALAS-2026-4065)

The version of kernel installed on the remote host is prior to 4.14.355-287.758. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4065 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace perio...