Amazon Linux 2 : awscli (ALAS-2026-4052)

The version of awscli installed on the remote host is prior to 1.18.147-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4052 advisory. Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been...

RHEL 8 : perl-XML-LibXML (RHSA-2026:92798)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:92798 advisory. This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module...

RHEL 9 : tomcat (RHSA-2026:92870)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92870 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat:...

Amazon Linux 2023 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2023-2026-3372)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3372 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...

Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2026_90462)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202690462 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2026:92160)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92160 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

Tenable Identity Exposure < 3.77.18 (LTS) / 3.93.6 Multiple Vulnerabilities (TNS-2026-34)

The version of Tenable Identity Exposure running on the remote host is prior to 3.77.18 LTS, or 3.78.x prior to 3.93.6. It is, therefore, affected by multiple vulnerabilities according to advisory TNS-2026-34: - A command injection vulnerability in the Active Directory Events Listener of Tenable...

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-3345)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3345 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Linux Distros Unpatched Vulnerability : CVE-2026-119591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization that allows attackers to crash the host process via count over a large...

Rocky Linux 8 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel / etc (crlsa-2026_92157)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202692157 advisory. cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Tenable has extracted the preceding description block...

Amazon Linux 2 : containerd (ALASECS-2026-152)

The version of containerd installed on the remote host is prior to 2.3.7-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-152 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the...

RHEL 8 : rhc (RHSA-2026:92217)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:92217 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

Rocky Linux 10.2 [CIQ] Security Update: brotli / brotli-debuginfo / brotli-debugsource / brotli-devel / etc (crlsa-2026_90449)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202690449 advisory. brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 Tenable has extracted the preceding description block directly from the CIQ security...

RHEL 8 : tomcat (RHSA-2026:92869)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92869 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat:...

Amazon Linux 2023 : credentials-fetcher (ALAS2023-2026-3360)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3360 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

RHEL 8 : kernel-rt (RHSA-2026:92208)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92208 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Linux Distros Unpatched Vulnerability : CVE-2026-119276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, when...

Linux Distros Unpatched Vulnerability : CVE-2026-108353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108353 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

RHEL 9 : aspell (RHSA-2026:92458)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92458 advisory. GNU Aspell is a spell checker designed to eventually replace Ispell. It can either be used as a library or as an independent spell checker. Security...

Rocky Linux 10.2 [CIQ] Security Update: gcc-toolset-15-gcc / gcc-toolset-15-gcc-c++ / etc (crlsa-2026_89891)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202689891 advisory. gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 Tenable has extracted the preceding...

Amazon Linux 2023 : yq (ALAS2023-2026-3347)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3347 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : soci-snapshotter (ALAS2023-2026-3351)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3351 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates...

CentOS Linux 6 [TuxCare] Security Update: rpm / rpm-apidocs / rpm-build / rpm-cron / rpm-devel / rpm-libs / etc (CENTOS6:CLSA-2026:1793110602)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1793110602 advisory. - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to...

RHEL 8 : kernel (RHSA-2026:92209)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92209 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: arm64: vgic: Handle race...

RHEL 9 : ignition (RHSA-2026:91719)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:91719 advisory. Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regula...

Linux Distros Unpatched Vulnerability : CVE-2026-119270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the...

Amazon Linux 2 : libxml2 (ALAS-2026-4059)

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4059 advisory. A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer...

AlmaLinux 9.2 [TuxCare] Security Update: mrtg (ALMALINUX9.2:CLSA-2026:1793361450)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793361450 advisory. - A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacke...

Amazon Linux 2 : java-11-amazon-corretto (ALAS-2026-4067)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.33.0.10-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4067 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...

Rocky Linux 8 [CIQ] Security Update: webkit2gtk3 / webkit2gtk3-debuginfo / webkit2gtk3-debugsource / etc Multiple Vulnerabilities (crlsa-2026_91636)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202691636 advisory. chromium-browser: angle: Use after free in ANGLE CVE-2026-95325 chromium-browser: angle: Out of bounds write in ANGLE CVE-2026-95331 chromium-browser:...

RHEL 10 : bind (RHSA-2026:92419)

"The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92419 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

Amazon Linux 2 : awscli (ALASAWSCLI1-2026-002)

The version of awscli installed on the remote host is prior to 1.27.51-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2AWSCLI1-2026-002 advisory. Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not...

Linux Distros Unpatched Vulnerability : CVE-2026-118251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns credits.href to the window location when th...

RHEL 10 : ignition (RHSA-2026:91720)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:91720 advisory. Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regul...

Linux Distros Unpatched Vulnerability : CVE-2026-112922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document...

RockyLinux 8 : nodejs:24 (RLSA-2026:92376)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:92376 advisory. ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing CVE-2026-101911 brace-expansion: brace-expansion: Denial of Service via...

Linux Distros Unpatched Vulnerability : CVE-2026-119196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated fr...

AlmaLinux 9.2 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793355720)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793355720 advisory. - When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an...

Rocky Linux 8 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (crlsa-2026_90800)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202690800 advisory. emacs: Emacs: arbitrary code execution in Flymake mode CVE-2026-96442 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Amazon Linux 2023 : golang-github-burntsushi-toml-test, golang-github-burntsushi-toml-test-devel (ALAS2023-2026-3363)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3363 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

CentOS Linux 7 [TuxCare] Security Update: cpp / gcc / gcc-c++ / gcc-gfortran / gcc-gnat / gcc-go / gcc-objc / etc (CENTOS7:CLSA-2026:1793100162)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793100162 advisory. - A flaw was found in GCC. When an application calls the eraseif function on a binary heap priority queue in libstdc++, the library reallocates...

RHEL 9 : libXtst (RHSA-2026:91223)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:91223 advisory. X.Org X11 libXtst runtime library Security Fixes: libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser CVE-2026-94286 F...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_90365)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202690365 advisory. kernel: udp: Deal with race between UDP socket address change and rehash CVE-2024-57974 kernel: fuse: re-lock request before replacing page cache folio...

RHEL 9 : firefox (RHSA-2026:92226)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92226 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

RHEL 9 : tomcat (RHSA-2026:92872)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92872 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat:...

Oracle Linux 9 : .NET / 9.0 (ELSA-2026-92429)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92429 advisory. 9.0.123-1.0.1 - Add support for Oracle Linux 9.0.123-1 - Update to .NET SDK 9.0.123 and Runtime 9.0.22 - Resolves: RHEL-291727 Tenable has extracted the...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-92492)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-92492 advisory. 8.0.133-1.0.1 - Add support for Oracle Linux 8.0.133-1 - Update to .NET SDK 8.0.133 and Runtime 8.0.33 - Resolves: RHEL-291717 Tenable has extracted t...

Linux Distros Unpatched Vulnerability : CVE-2026-108273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - request-tracker5 - None CVE-2026-108273 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Amazon Linux 2 : ecs-init (ALASECS-2026-156)

The version of ecs-init installed on the remote host is prior to 1.108.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-156 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the...

Arista VeloCloud Orchestrator SQL Injection Vulnerability (SA0199)

The version of Arista VeloCloud Orchestrator running on the remote device is affected by a SQL injection vulnerability as referenced in security advisory SA0199. - A SQL injection vulnerability exists in Arista VeloCloud Orchestrator. A remote attacker could access privileged internal functionali...