Linux Distros Unpatched Vulnerability : CVE-2026-94418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under WOLFSSLSMALLCERTVERIFY, ProcessPeerCertParse runs the certificate signature check separately from the parse to keep peak memory down, then merges the two...

SUSE SLES16 Security Update : alloy (SUSE-SU-2026:23865-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23865-1 advisory. - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for...

SUSE SLES16 Security Update : zstd-jni (SUSE-SU-2026:23868-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23868-1 advisory. - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read bsc1279953. - CVE-2026-87824: denial of Servi...

Linux Distros Unpatched Vulnerability : CVE-2026-15442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all builds that make use of DTLS, including default builds, there is a series of conditional states during the TLS shutdown which could lead to a...

Linux Distros Unpatched Vulnerability : CVE-2026-100692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement checks stopped at the mount root itself, so a theme ...

Linux Distros Unpatched Vulnerability : CVE-2026-94419

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Without NOSESSIONCACHEREF, wolfSSLgetsession does not return a session object but a ClientSession reference of the form row, index, hashsessionID into the...

SUSE SLES16 Security Update : distribution (SUSE-SU-2026:23864-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23864-1 advisory. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through...

SUSE SLES16: erlang-rabbitmq-client / rabbitmq-server / etc (SUSE-SU-2026:23869-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23869-1 advisory. - CVE-2026-44839: XSS in management UI due to unsanitized vhost names bsc1266465. - CVE-2026-57212: The rabbitmqmanagement HTTP AP...

Fedora 43 : pgadmin4 (2026-dddd2792e3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dddd2792e3 advisory. Update to pgadmin-9.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-77037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream...

FreeBSD : Rauthy -- Multiple security vulnerabilities (2ec747aa-b97e-11f1-b09d-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2ec747aa-b97e-11f1-b09d-8447094a420f advisory. The Rauthy project reports: WebAuthn authentication code is not bound to the user. GHSA-x8jp-v2j6-6vjf...

Fedora 43 : mingw-python3 (2026-9359fb439f)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9359fb439f advisory. Update to python-3.11.16. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

FreeBSD : chromium -- security fixes (bd24bc14-b9a9-11f1-bf98-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bd24bc14-b9a9-11f1-bf98-a8a1599412c6 advisory. Chrome Releases reports: This update includes 108 security fixes: Tenable has extracted the...

Debian dsa-6522 : exim4 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6522 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6522-1 [email protected] https://www.debian.org/securit...

SUSE SLES16 Security Update : jsoup, re2j (SUSE-SU-2026:23867-1)

"The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23867-1 advisory. This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every...

Linux Distros Unpatched Vulnerability : CVE-2026-95510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - inetutils - None CVE-2026-95510 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

Linux Distros Unpatched Vulnerability : CVE-2026-93302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSLTRUSTPEERCE...

RockyLinux 9 : firefox (RLSA-2026:67133)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67133 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Clie...

Linux Distros Unpatched Vulnerability : CVE-2026-100310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU libextractor before 1.16 loads plugins from an untrusted search path specified by the LIBEXTRACTORPREFIX environment variable without proper privilege check...

SUSE SLES16 Security Update : libsoup (SUSE-SU-2026:23857-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23857-1 advisory. - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap...

Linux Distros Unpatched Vulnerability : CVE-2026-100694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo is a static site generator. In versions from v0.56.0 through v0.165.x, content files mapped to the text/org media type are rendered without escaping raw...

MiracleLinux 8 : kernel-4.18.0-553.163.1.el8_10 (AXSA:2026-1919:84)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1919:84 advisory. kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address...

Linux Distros Unpatched Vulnerability : CVE-2026-100695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTIONID database result is interpolated into JavaScript without proper escapin...

RockyLinux 8 : firefox (RLSA-2026:68549)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:68549 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Clie...

Linux Distros Unpatched Vulnerability : CVE-2026-100691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does not escape the lineAnchors option before...

Fedora 43 : mongo-c-driver (2026-b4c749cdd2)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b4c749cdd2 advisory. libbson 1.30.11 Fixes - Fix length check in bsonnewfrombuffer. ---- libmongoc 1.30.11 Fixes - Fix allocation in Windows Secure Channel. - Fix error...

NetScaler ADC and NetScaler Gateway 13.1 < 13.1-64.23 / 14.1 < 14.1-73.37 Multiple Vulnerabilities

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is version 13.1 prior to 13.1-64.23, 14.1 prior to 14.1-73.37, 13.1-FIPS/NDcPP prior to 13.1-37.279, or 14.1-FIPS prior to 14.1-73.37. It is, therefore, affected by multiple vulnerabilities: - A remot...

RHEL 7 : unbound (RHSA-2026:72199)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72199 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Heap buffer overflow and...

Linux Distros Unpatched Vulnerability : CVE-2026-100666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty's HttpServerCodec io.netty:netty-codec-http in versions 4.2.0.Final through 4.2.16.Final and in versions up to and including 4.1.136.Final pairs each...

Fedora 44 : chromium (2026-1e015b5959)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1e015b5959 advisory. Update to 154.0.8037.57 CVE-2026-95274: Improper output encoding in DevTools CVE-2026-95275: Incorrect reference resolution in MediaStream...

Linux Distros Unpatched Vulnerability : CVE-2026-100655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty io.netty:netty-codec-http versions up to and including 4.1.137.Final and from 4.2.0.Final through 4.2.17.Final accept an unlimited number of concurrent...

Linux Distros Unpatched Vulnerability : CVE-2026-100696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer 4.16.0 through 6.0.1 contain a pre-authentication Server-Side Request Forgery SSRF vulnerability in the optional Elasticsearch driver...

Linux Distros Unpatched Vulnerability : CVE-2026-100697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer 6.0.0 through 6.0.1, when the official ClickHouse driver plugin plugins/drivers/clickhouse.php, rewritten in 6.0.0 is loaded, is vulnerable to...

Linux Distros Unpatched Vulnerability : CVE-2026-100395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - lxc - None CVE-2026-100395 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

RockyLinux 10 : firefox (RLSA-2026:67129)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67129 advisory. firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings...

Linux Distros Unpatched Vulnerability : CVE-2026-100656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty io.netty:netty-codec-http contains an unbounded per-connection queue growth flaw in HttpServerCodec. The codec tracks the HTTP method of each...

Fedora 45 : pgadmin4 (2026-035cf95dc5)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-035cf95dc5 advisory. Update to pgadmin-9.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2026-100657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty's STOMP codec io.netty:netty-codec-stomp contains a ByteBuf leak in StompSubframeDecoder. Once a frame's declared content-length has been fully read, the...

Fedora 43 : postgresql16-postgis / postgresql17-postgis / postgresql18-postgis (2026-bb0d483289)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-bb0d483289 advisory. Backport fix for CVE-2026-73515. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

FreeBSD : Fetchmail -- NTLM potential remote code execution (15e880b4-b9ed-11f1-b17e-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 15e880b4-b9ed-11f1-b17e-3c7c3fba4204 advisory. Fetchmail reports: CVE-2026-94184: Fetchmail's NTLM authentication client can in some cases be...

Fedora 43 : goose (2026-5c0d326b15)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5c0d326b15 advisory. Update to 1.45.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 45 : goose (2026-cb99e9b2ac)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cb99e9b2ac advisory. Update to 1.45.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

SUSE SLES16: lastlog2 / libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2026:23870-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23870-1 advisory. - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount progr...

Fedora 43 : ckermit (2026-cc3b077d5b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cc3b077d5b advisory. Update to 11.0.509 to address CVE-2025-68920 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

RockyLinux 10 : python-cryptography (RLSA-2026:71658)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:71658 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 Tenable has extracted the...

openSUSE 16 Security Update : kbd (openSUSE-SU-2026:21939-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21939-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that...

openSUSE 16: libosmo-hnbap-devel / libosmo-hnbap0 / libosmo-ranap-devel / etc (openSUSE-SU-2026:21954-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21954-1 advisory. Changes in osmo-iuh: - CVE-2026-75894: iuclient: reject oversized RANAP NAS-PDU boo1281607. Tenable has extracted the preceding description block direct...

Fedora 43 : sipp (2026-b0077de9df)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b0077de9df advisory. Fixed a bunch of CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

openSUSE 16: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix3 / etc (openSUSE-SU-2026:21938-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21938-1 advisory. - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read...

Fedora 45 : mingw-python3 (2026-19a92359f8)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-19a92359f8 advisory. Update to python-3.11.16. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...