openSUSE 16: NetworkManager / NetworkManager-bluetooth / etc (openSUSE-SU-2026:21776-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21776-1 advisory. - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership...

openSUSE 16: libsystemd0 / libudev1 / systemd / systemd-boot / systemd-container / etc (openSUSE-SU-2026:21754-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21754-1 advisory. This update for systemd fixes the following issue: Security issue fixed: - CVE-2026-16742: systemd-homed: local privilege escalation due to...

openSUSE 16: libipa_hbac-devel / libipa_hbac0 / libnfsidmap-sss / etc (openSUSE-SU-2026:21748-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21748-1 advisory. Security issues fixed: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when...

Oracle Linux 8 : ELSA-2026-64809-0: / expat (ELSA-2026-648090)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648090 advisory. - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Fix CVE-2026-50219 Tenable has extracted the preceding description block...

MiracleLinux 8 : xmlrpc-c-1.51.0-11.el8_10.1 (AXSA:2026-1789:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1789:02 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from t...

openSUSE 16 Security Update : python-Authlib (openSUSE-SU-2026:21795-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21795-1 advisory. Changes in python-Authlib: - CVE-2026-41479: Open Redirect vulnerability via crafted authorization requests bsc1275231 Tenable has extracted the precedi...

EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-3396)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels...

openSUSE 16 Security Update : perl-URI (openSUSE-SU-2026:21773-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21773-1 advisory. This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing...

Fedora 44 : complyctl (2026-f33ade2ba6)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f33ade2ba6 advisory. This update aligns the package to the latest Upstream release, which is also the first stable version of complyctl. It introduced the core redesign...

Fedora 44 : openvpn (2026-725faae162)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-725faae162 advisory. Update to upstream 2.7.7 release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Google Chrome < 153.0.8010.36 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 153.0.8010.36. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0808145027 advisory. - Use after free in V8 in Google Chrome prior to 153.0.8010.36 allow...

openSUSE 16 Security Update : fuse-overlayfs (openSUSE-SU-2026:21753-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21753-1 advisory. This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate...

openSUSE 16: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (openSUSE-SU-2026:21782-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21782-1 advisory. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time:...

Oracle Linux 8 : ELSA-2026-64772-0: / xmlrpc-c (ELSA-2026-647720)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-647720 advisory. 1.51.0-11.1 - Fix HTML injection in Abyss HTTP server responses CVE-2026-15928 Tenable has extracted the preceding description block directly from the Oracle...

MiracleLinux 9 : python3.14-cryptography-45.0.4-4.el9_8.6 (AXSA:2026-1788:01)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1788:01 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography...

Fedora 44 : libevent (2026-72d10c874d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-72d10c874d advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

RHEL 8 : kernel (RHSA-2026:65711)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65711 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcievent: fix...

Oracle Linux 8 : ELSA-2026-62667-0: / perl-DBI (ELSA-2026-626670)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-626670 advisory. - Fix stack overflow and buffer overflow in DBI.xs CVE-2026-9698 Resolves: RHEL-211160 - Fix heap overflow in SQL preparsing can lead to denial of...

openSUSE 16 Security Update : rpcbind (openSUSE-SU-2026:21765-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21765-1 advisory. This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting...

openSUSE 16 Security Update : msgpack-c (openSUSE-SU-2026:21768-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21768-1 advisory. This update for msgpack-c fixes the following issue: Update to release 7.0.2: - CVE-2026-72854: Integer Overflow in msgpackunpackerexpandbuffer Causes a...

openSUSE 16 Security Update : dracut (openSUSE-SU-2026:21749-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21749-1 advisory. Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and roo...

openSUSE 16 Security Update : supergfxctl (openSUSE-SU-2026:21794-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21794-1 advisory. Changes in supergfxctl: - Fixed security issue in embedded dependency 'bytes' CVE-2026-25541 boo1274336 - Update to version 1762634235.5d503b1: Added...

RHEL 8 : kernel (RHSA-2026:65709)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65709 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcievent: fix...

openSUSE 16: curl / curl-fish-completion / curl-zsh-completion / libcurl-devel / etc (openSUSE-SU-2026:21774-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21774-1 advisory. - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926:...

openSUSE 16 Security Update : libusb-1_0 (openSUSE-SU-2026:21783-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21783-1 advisory. - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration...

openSUSE 16 Security Update : php-composer2 (openSUSE-SU-2026:21778-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21778-1 advisory. This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257. Tenabl...

EulerOS 2.0 SP12 : containerd (EulerOS-SA-2026-3397)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels...

openSUSE 16: freeciv / freeciv-gtk3 / freeciv-gtk4 / freeciv-lang / freeciv-qt / etc (openSUSE-SU-2026:21800-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21800-1 advisory. Changes in freeciv: - freeciv 3.2.6: Fix Heap Buffer Overflow in worklistload via Crafted Save File boo1278695 Fix Out-of-Bounds Read in activities.orde...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21793-1)

"The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21793-1 advisory. Changes in hauler: - update to 2.1.0 bsc1265425, CVE-2026-41888: v2.1.0 is a minor release built on the containerd- native foundation laid down...

RHEL 9 : kernel (RHSA-2026:65712)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65712 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Kernel: Privilege escalation...

openSUSE 16 Security Update : libidn (openSUSE-SU-2026:21758-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21758-1 advisory. This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965. Tenable has extracted the preceding...

Debian dsa-6491 : libpam-slurm - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6491 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6491-1 [email protected] https://www.debian.org/securit...

openSUSE 16 Security Update : cpio (openSUSE-SU-2026:21747-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21747-1 advisory. - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended...

openSUSE 16 Security Update : python-sqlparse (openSUSE-SU-2026:21777-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21777-1 advisory. This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption...

openSUSE 16: java-21-openjdk / java-21-openjdk-demo / java-21-openjdk-devel / etc (openSUSE-SU-2026:21759-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21759-1 advisory. Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21799-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21799-1 advisory. Changes in chromium: - Chromium 152.0.7977.82 boo1278683: CVE-2026-85046: Type confusion in V8 CVE-2026-85052: Out of bounds read in...

openSUSE 16: java-17-openjdk / java-17-openjdk-demo / java-17-openjdk-devel / etc (openSUSE-SU-2026:21745-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21745-1 advisory. Upgrade to upstream tag jdk-17.0.20.1+1 August 2026 CSPU. - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols...

Fedora 44 : tar (2026-044e56d9ff)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-044e56d9ff advisory. Fix build with libacl 2.4.0, fix CVE-2026-5704, CVE-2026-18508, CVE-2026-18477, and a regression in the fix for CVE-2025-45582. Tenable has extracte...

openSUSE 16 Security Update : bzip2 (openSUSE-SU-2026:21762-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21762-1 advisory. This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file...

RHCOS 4 : Red Hat build of MicroShift 4.19.46 (RHSA-2026:63636)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63636 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame...

Google Chrome < 153.0.8010.36 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 153.0.8010.36. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0808145027 advisory. - Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed...

openSUSE 16: mcphost / mcphost-bash-completion / mcphost-fish-completion / etc (openSUSE-SU-2026:21771-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21771-1 advisory. - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs...

openSUSE 16 Security Update : google-cloud-sap-agent (openSUSE-SU-2026:21755-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21755-1 advisory. This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers...

RHEL 8 : kernel (RHSA-2026:65710)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65710 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: dm btree remove: fix use afte...

Oracle Linux 8 : ELSA-2026-63014-0: / kernel (ELSA-2026-630140)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-630140 advisory. - net: ipv6: clear suppressed fib6 rule result Jamie Bainbridge RHEL-246806 CVE-2026-74581 - RHEL only: Disable zram writeback support on non-4k page...

Linux Distros Unpatched Vulnerability : CVE-2026-62437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated remova...

RHEL 8 : gegl (RHSA-2026:64802)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:64802 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: GIMP: Arbitrary code execution via heap-based buffe...

Debian dsa-6489 : gir1.2-gst-plugins-base-1.0 - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6489 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6489-1 [email protected] https://www.debian.org/security/ Moritz...

EulerOS 2.0 SP12 : libxml2 (EulerOS-SA-2026-3281)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-74859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can...