Fedora 43 : cryptlib (2026-47575c76a5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-47575c76a5 advisory. A third update after 3.4.9 to prepare for deprecation of obsolete algorithms and attributes in the upcoming 3.5 release. Tenable has extracted the preceding...

SUSE SLED15 / SLES15 Security Update : python-aiohttp (SUSE-SU-2026:3207-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3207-1 advisory. This update for python-aiohttp fixes the following issues - CVE-2026-22815: insufficient restrictions in...

openSUSE 16 Security Update : gawk (openSUSE-SU-2026:21393-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21393-1 advisory. - CVE-2026-40467: use-after-free vulnerability within the dogetlineredir routine could lead to a program crash bsc1271351. - CVE-2026-40468:...

Microsoft Edge (Chromium) < 150.0.4078.50 (CVE-2026-58525)

The version of Microsoft Edge installed on the remote Windows host is prior to 150.0.4078.50. It is, therefore, affected by a vulnerability as referenced in the July 8, 2026 advisory. - Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security...

Microsoft Edge (Chromium) < 149.0.4022.62 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.62. It is, therefore, affected by multiple vulnerabilities as referenced in the June 15, 2026 advisory. - Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103...

Microsoft Edge (Chromium) < 149.0.4022.52 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.52. It is, therefore, affected by multiple vulnerabilities as referenced in the June 5, 2026 advisory. - Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to...

Rockwell Automation Arena < 17.00.01 Multiple Vulnerabilities (SD1784)

The version of Rockwell Automation Arena installed on the remote Windows host is prior to 17.00.01. It is, therefore, affected by multiple vulnerabilities: - A memory corruption vulnerability exists in the model.exe Siman component due to improper validation of user-supplied data, which can resul...

SUSE SLES12 Security Update : wget (SUSE-SU-2026:3205-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3205-1 advisory. This update for wget fixes the following issues - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side reques...

Grafana Labs 12.4.0 < 12.4.4 / 13.0.0 < 13.0.2 Multiple Vulnerabilities

The version of Grafana Labs installed on the remote host is affected by multiple vulnerabilities, including: - A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser o...

Amazon Linux 2023 : nvidia-kmod-common (ALAS2023NVIDIA-2026-304)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-304 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

AlmaLinux 9 : java-17-openjdk (ALSA-2026:42887)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42887 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance...

Microsoft Edge (Chromium) < 148.0.3967.97 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 148.0.3967.97. It is, therefore, affected by multiple vulnerabilities as referenced in the May 31, 2026 advisory. - Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a...

Oracle Linux 10 : buildah (ELSA-2026-36199)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36199 advisory. - rebuild for CVE-2026-39822 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Rebuild for CVE-2026-25679 Tenable has extracted the...

Amazon Linux 2023 : nvidia-open (ALAS2023NVIDIA-2026-301)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-301 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

openSUSE 16: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (openSUSE-SU-2026:21401-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21401-1 advisory. This update for GraphicsMagick fixes the following issue - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails bsc1271293. Tenable has...

openSUSE 16 Security Update : afterburn (openSUSE-SU-2026:21386-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21386-1 advisory. Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow shor...

Amazon Linux 2023 : libnvsdm, libnvsdm-devel (ALAS2023NVIDIA-2026-307)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-307 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Oracle Linux 10 : kernel (ELSA-2026-44270)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-44270 advisory. 6.12.0-211.38.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux...

Microsoft Edge (Chromium) < 149.0.4022.69 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.69. It is, therefore, affected by multiple vulnerabilities as referenced in the June 15, 2026 advisory. - Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a...

Oracle Linux 10 : openssl (ELSA-2026-22314)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22314 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...

Fedora 43 : dotnet9.0 (2026-3afd9d89f4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3afd9d89f4 advisory. Update to .NET SDK 9.0.119 and Runtime 9.0.18 Fixes:...

AlmaLinux 10 : kernel (ALSA-2026:42919)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42919 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: Linux kernel: Denial of Service due to memory leak in...

AlmaLinux 9 : kernel (ALSA-2026:43307)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:43307 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: scsi: core: Wake up the error handler when final...

Rockwell FactoryTalk Services Platform 6.60 Authentication Bypass (SD1786)

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is 6.60. It is, therefore, affected by an authentication bypass vulnerability: - A vulnerability exists that allows an attacker to bypass JWT signature validation during Okta Web Authentication. The...

Amazon Linux 2023 : nvidia-xconfig (ALAS2023NVIDIA-2026-299)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-299 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

MiracleLinux 9 : openssl-3.5.5-4.el9_8.ML.1 (AXSA:2026-1339:14)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1339:14 advisory. openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing CVE-2026-7383 openssl: OpenSSL: Denial of Service due...

openSUSE 16 Security Update : python-pyasn1 (openSUSE-SU-2026:21392-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21392-1 advisory. - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs bsc1271464. - CVE-2026-59885: quadratic complexity in...

Rockwell Automation ThinManager ThinServer Path Traversal (SD1782)

The version of Rockwell Automation ThinManager ThinServer installed on the remote host is 13.0.x through 13.0.7, 13.1.x through 13.1.5, 13.2.x through 13.2.4, or 14.0.x through 14.0.2. It is, therefore, affected by a path traversal vulnerability: - A path traversal vulnerability exists due to...

Microsoft Edge (Chromium) < 149.0.4022.53 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.53. It is, therefore, affected by multiple vulnerabilities as referenced in the June 9, 2026 advisory. - Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to...

Amazon Linux 2023 : cuda-drivers (ALAS2023NVIDIA-2026-312)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-312 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-imex (ALAS2023NVIDIA-2026-305)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-305 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Debian dla-4696 : imagemagick - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4696 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4696-1 [email protected]...

Amazon Linux 2023 : nvidia-persistenced (ALAS2023NVIDIA-2026-300)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-300 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

openSUSE 16 Security Update : radvd (openSUSE-SU-2026:21400-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21400-1 advisory. This update for radvd fixes the following issue - CVE-2026-48715: crafted ICMPv6 Router Advertisement can lead to a stack-based buffer overflow...

IBM InfoSphere 11.7.0.x <= 11.7.1.6 Information Disclosure (7278188)

The version of IBM InfoSphere Information Server installed on the remote host is 11.7.0.0 through 11.7.1.6. It is, therefore, affected by an information disclosure vulnerability. - IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability...

Microsoft Edge (Chromium) < 150.0.4078.96 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 150.0.4078.96. It is, therefore, affected by multiple vulnerabilities as referenced in the July 23, 2026 advisory. - Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182...

Fedora 43 : dotnet8.0 (2026-da44c3870f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-da44c3870f advisory. Update to .NET SDK 8.0.129 and Runtime 8.0.29 Fixes:...

Oracle GoldenGate for Big Data Multiple Vulnerabilities 23.x < 23.26.3.0.0 (July 2026 CPU)

According to its self-reported version number, the Oracle GoldenGate for Big Data application located on the remote host is affected by multiple vulnerabilities: - Vulnerability in the Oracle GoldenGate Big Data and Application Adapters product of Oracle GoldenGate component: Third Party Eclipse...

Amazon Linux 2023 : kmod-nvidia-open-dkms (ALAS2023NVIDIA-2026-310)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-310 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Oracle Linux 7 : compat-poppler022 (ELSA-2026-29952)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-29952 advisory. 0.22.5-4.0.1 - Fix for CVE-2026-10118 Orabug: 39635559 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

openSUSE 16 Security Update : gpg2 (openSUSE-SU-2026:21385-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21385-1 advisory. This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM bsc1269279. Tenable has...

MiracleLinux 8 : webkit2gtk3-2.52.5-1.el8_10.ML.1 (AXSA:2026-1340:06)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1340:06 advisory. Mozilla: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process...

RHEL 9 : kernel (RHSA-2026:45192)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:45192 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86: Don't recheck L1...

Amazon Linux 2023 : nvidia-fabric-manager-devel, nvidia-fabricmanager (ALAS2023NVIDIA-2026-306)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-306 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

SUSE SLES15 Security Update : wget (SUSE-SU-2026:3206-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3206-1 advisory. - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. -...

openSUSE 16: cockpit / cockpit-bridge / cockpit-devel / cockpit-firewalld / etc (openSUSE-SU-2026:21399-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21399-1 advisory. Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the .unset and .omit functions can lead to deletion of methods from glob...

Photon OS 5.0: Nasm PHSA-2026-5.0-0925

An update of the nasm package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0925. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle GoldenGate for Big Data 19.1.x < 19.1.0.0.24 (July 2026 CPU)

According to its self-reported version number, the Oracle GoldenGate for Big Data application located on the remote host is affected by a vulnerability: - Vulnerability in the Oracle GoldenGate Big Data and Application Adapters product of Oracle GoldenGate. Supported versions that are affected ar...

Oracle Linux 9 : compat-openssl11 (ELSA-2026-44438)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-44438 advisory. 1:1.1.1k-5.4 - Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7verify Tenable has extracted the preceding description block directly from the Oracle...

SUSE SLED15 / SLES15 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2026:3214-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3214-1 advisory. This update for ntfs-3gntfsprogs fixes the following issues - CVE-2026-42616: heap buffer overflow in cat of...