Linux Distros Unpatched Vulnerability : CVE-2026-76816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client...

Linux Distros Unpatched Vulnerability : CVE-2026-52490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop....

Dotnetnuke < 10.3.3 Permission precedence flaw in module permissions (GHSA-hqgc-qj63-mx24)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - A permission evaluation flaw could allow users with page-level content permissions to access module management features despite...

TencentOS Server 4: perl-Date-Manip (TSSA-2026:0864)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0864 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

JetBrains TeamCity < 2019.1.4 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2019.1.4. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. CVE-2020-11686 - In JetBrains TeamCity...

EulerOS Virtualization 2.13.0 : python-paramiko (EulerOS-SA-2026-3231)

According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

RockyLinux 9 : python-urwid (RLSA-2026:58952)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58952 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description bloc...

Wazuh Server 4.0.0 < 4.14.5 Incorrect Authorization (CVE-2026-44252)

The version of Wazuh Server on the remote host is at least 4.0.0 and prior to 4.14.5. It is, therefore, affected by an incorrect authorization vulnerability: - A low-privilege read-only API user with manager:read permission can retrieve the cluster key from ossec.conf. An attacker can use the...

Linux Distros Unpatched Vulnerability : CVE-2026-78161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function reportrawcbor of the file lib/misc/lecp.c of the component LECP CBOR Recordin...

AlmaLinux 10 : python-urwid (ALSA-2026:58561)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:58561 advisory. urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure CVE-2026-9323 Tenable has extracted the preceding description bloc...

RHEL 8 : webkit2gtk3 (RHSA-2026:59325)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59325 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2026:59135)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59135 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

RockyLinux 10 : python3.12 (RLSA-2026:58902)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58902 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding...

AlmaLinux 8 : NetworkManager (ALSA-2026:58555)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58555 advisory. NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend CVE-2026-10805 Tenable has extracted the preceding descripti...

JetBrains TeamCity < 2020.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2020.2. It is, therefore, affected by multiple vulnerabilities: - JetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages. CVE-2021-25773 - In JetBrains TeamCity before 2020.2, an ECR token could ...

Oracle Linux 10 : sqlite (ELSA-2026-58927)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58927 advisory. - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

EulerOS Virtualization 2.13.1 : libssh2 (EulerOS-SA-2026-3181)

According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...

Dotnetnuke < 10.3.3 GroupEdit postback tampering lets one group owner update another group (GHSA-4q79-2m2q-gw8w)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - An authorization vulnerability in the Social Groups module could allow a group owner to modify another group's information. Site...

RockyLinux 10 : gstreamer1-plugins-base (RLSA-2026:59097)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59097 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 Tenable has extracted the preceding description block directl...

RHEL 10 : gstreamer1-plugins-base (RHSA-2026:59097)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59097 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

AlmaLinux 8 : gstreamer1-plugins-good (ALSA-2026:59179)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59179 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution vi...

Linux Distros Unpatched Vulnerability : CVE-2026-77635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue wit...

JetBrains TeamCity < 2022.10 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2022.10. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive CVE-2022-44622 - In JetBrains...

Ubuntu 22.04 LTS / Pro Realtime 22.04 LTS : Linux kernel (IBM) vulnerabilities (USN-8658-2)

The remote Ubuntu 22.04 LTS / Pro Realtime 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8658-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This...

JetBrains TeamCity < 2025.11.6 / 2026.x < 2026.1.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2025.11.6, or prior to 2026.1.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.1.2, 2025.11.6 ode execution via Kotlin DSL sandbox escape was possible CVE-2026-65906 - In...

EulerOS Virtualization 2.13.0 : libXpm (EulerOS-SA-2026-3219)

According to the versions of the libXpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in X.org libXpm up to 3.5.4. It has been classified as problematic.CWE is classifying the issue as CWE-12...

TencentOS Server 4: jq (TSSA-2026:0863)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0863 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-77337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Versions before 2.11.2, from 3.0.0 through...

EulerOS Virtualization 2.13.0 : sudo (EulerOS-SA-2026-3241)

According to the versions of the sudo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the...

Fedora 44 : jfrog-cli (2026-39186e6ecd)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-39186e6ecd advisory. Update to 2.120. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

RHEL 9 : ignition (RHSA-2026:59549)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59549 advisory. Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regula...

RHEL 10 : assertj-core (RHSA-2026:59372)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59372 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

JetBrains TeamCity < 2019.2.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2019.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. CVE-2020-11688 - In JetBrains TeamCity before...

EulerOS Virtualization 2.13.1 : samba (EulerOS-SA-2026-3197)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers tha...

Linux Distros Unpatched Vulnerability : CVE-2026-78465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes...

AlmaLinux 10 : nodejs24 (ALSA-2026:58819)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:58819 advisory. brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand function CVE-2026-14257 ip-address: ip-address: Server-Side Request...

EulerOS Virtualization 2.13.0 : haveged (EulerOS-SA-2026-3214)

According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...

Debian dsa-6464 : erlang - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6464 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6464-1 [email protected] https://www.debian.org/securit...

RockyLinux 10 : nodejs24 (RLSA-2026:58819)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58819 advisory. brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand function CVE-2026-14257 ip-address: ip-address: Server-Side Request...

EulerOS Virtualization 2.13.0 : httpd (EulerOS-SA-2026-3215)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...

Fedora 44 : chromium (2026-7cee1b8755)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7cee1b8755 advisory. Update to 151.0.7922.173 CVE-2026-76017: Use after free in Chromoting CVE-2026-76018: Privilege elevation in Import CVE-2026-76019: Incorrect...

JetBrains TeamCity < 2020.2.3 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2020.2.3. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2020.2.3, XSS was possible. CVE-2021-37542 - In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code...

GLSA-202608-23 : Incus: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-23 Incus: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Incus. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

EulerOS Virtualization 2.13.1 : sed (EulerOS-SA-2026-3198)

According to the versions of the sed packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When sed is invoked with both -i in-place edit and --follow-symlinks, the function opennextfile performs two separate, non-atomic...

EulerOS Virtualization 2.13.0 : krb5 (EulerOS-SA-2026-3217)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system...

Oracle Linux 8 : python3.12 (ELSA-2026-58971)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58971 advisory. 3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227198 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RHEL 8 : sg3_utils (RHSA-2026:59567)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59567 advisory. The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes:...

SUSE SLES12 Security Update : kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3706-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3706-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues: The following security issues were fixed: -...

RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:59136)

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59136 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

Apache Tomcat 10.1.0.M1 < 10.1.59 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.59. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.59security-10 advisory. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This iss...