CentOS Linux 8 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (CENTOS-STREAM8:CLSA-2026:1793259970)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1793259970 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-118754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP CRM before 24.0.2 contains a missing authorization vulnerability in htdocs/public/recruitment/view.php that allows unauthenticated attackers to vie...

AlmaLinux 8 : expat (ALSA-2026:92323)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:92323 advisory. expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in...

Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793290409)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793290409 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not ...

RockyLinux 10 : emacs (RLSA-2026:90887)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:90887 advisory. emacs: GNU Emacs: Arbitrary code execution upon opening a file CVE-2026-96269 Tenable has extracted the preceding description block directly from the RockyLinux...

Amazon Linux 2023 : nvidia-persistenced (ALAS2023NVIDIA-2026-327)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-327 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...

RockyLinux 8 : gcc-toolset-15-gcc (RLSA-2026:90915)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:90915 advisory. gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 Tenable has extracted the preceding...

Tanium Comply 2.32.x < 2.32.263 / 2.35.x < 2.35.323 / 2.37.x < 2.37.326 Improper Output Sanitization (TAN-2026-069)

The version of Tanium Comply installed on the remote host is 2.32.x prior to 2.32.263, 2.35.x prior to 2.35.323, or 2.37.x prior to 2.37.326. It is, therefore, affected by an improper output sanitization vulnerability as referenced in the TAN-2026-069 advisory. - Tanium addressed an improper outp...

Amazon Linux 2023 : nvidia-modprobe (ALAS2023NVIDIA-2026-320)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-320 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...

AlmaLinux 10 : gcc-toolset-15-gcc (ALSA-2026:89891)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:89891 advisory. gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap eraseif CVE-2026-102010 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-114148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. CVE-2026-114148 Note that Nessus relies on the presen...

Amazon Linux 2023 : nvidia-kmod-common (ALAS2023NVIDIA-2026-315)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-315 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...

RHEL 9 : ignition (RHSA-2026:90514)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90514 advisory. Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regula...

AlmaLinux 9.6 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793289482)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793289482 advisory. - Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. T...

RockyLinux 9 : kernel (RLSA-2026:90365)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:90365 advisory. kernel: udp: Deal with race between UDP socket address change and rehash CVE-2024-57974 kernel: fuse: re-lock request before replacing page cache folio...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147027 advisory. A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to ...

Linux Distros Unpatched Vulnerability : CVE-2026-118657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers from any client. A client that reaches Ech...

Linux Distros Unpatched Vulnerability : CVE-2026-116078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthenticated remote attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-118260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads complete request bodies into memory before handlers run and...

Debian dla-4869 : libvlc-bin - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4869 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4869-1 [email protected]...

RHEL 9 : ignition (RHSA-2026:90519)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90519 advisory. Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files regula...

Linux Distros Unpatched Vulnerability : CVE-2026-112375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated Kafka principal with no authorization grants not even ALTERCONFIGS can make a broker read a file or an environment variable from the broker hos...

Fedora 44 : python-pillow (2026-4dcd14a170)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4dcd14a170 advisory. Backport fix for CVE-2026-112892. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

RHEL 8 : brotli (RHSA-2026:90501)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90501 advisory. Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffm...

RHCOS 4 : OpenShift Container Platform 4.14.77 (RHSA-2026:89837)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89837 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame...

FreeBSD : Pillow -- multiple vulnerabilities (b9a3fd21-d2af-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b9a3fd21-d2af-11f1-bae2-3497f65b111b advisory. The Pillow project published security advisories for issues fixed in release 13.0.0. They...

FreeBSD : p5-Plack -- memory allocation vulnerability (3bd1edbf-d2d4-11f1-97dc-40b034429ecf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3bd1edbf-d2d4-11f1-97dc-40b034429ecf advisory. Plack project reports: Fix HTTP::Server::PSGI allocating a buffer as large as the declared...

Linux Distros Unpatched Vulnerability : CVE-2026-101291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (CENTOS7:CLSA-2026:1792993096)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792993096 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mongo-c-driver (UTSA-2026-146971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146971 advisory. An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation...

Linux Distros Unpatched Vulnerability : CVE-2026-118262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy goroutines, and network connections after a...

RHEL 10 : osbuild-composer (RHSA-2026:91646)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:91646 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

Amazon Linux 2023 : libnvsdm, libnvsdm-devel (ALAS2023NVIDIA-2026-321)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-321 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...

Linux Distros Unpatched Vulnerability : CVE-2026-59959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP...

Debian dla-4868 : libdatetime-timezone-perl - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4868 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4868-1 [email protected] https://www.debian.org/lts/security/...

RockyLinux 10 : bind (RLSA-2026:90328)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:90328 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcs (UTSA-2026-147004)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147004 advisory. Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body as a subsequent...

FreeBSD : git-lfs -- multiple vulnerabilities (cacb4538-d2d0-11f1-8062-64bc58adb10f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cacb4538-d2d0-11f1-8062-64bc58adb10f advisory. The Git LFS project reports: This release introduces security fixes for four vulnerabilities...

RHEL 8 : flatpak-builder (RHSA-2026:90896)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:90896 advisory. Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: flatpak-builder: Host code execution via git am hook execution in patc...

Linux Distros Unpatched Vulnerability : CVE-2026-117548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN rename operation uses an attribute's schema alias name such as...

Oracle Linux 10 : kernel (ELSA-2026-91565)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-91565 advisory. - scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE CKI Backport Bot RHEL-283521 CVE-2026-72083 - md/raid5-ppl: fix use-after-fr...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mongo-c-driver (UTSA-2026-146983)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146983 advisory. Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifie...

Linux Distros Unpatched Vulnerability : CVE-2026-7180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

RHEL 9 : delve (RHSA-2026:89933)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89933 advisory. Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go...

Oracle Linux 8 : webkit2gtk3 (ELSA-2026-91636)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-91636 advisory. 2.54.2-1 - Update to 2.54.2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

RockyLinux 8 : libXi (RLSA-2026:91268)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:91268 advisory. libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser CVE-2026-93543 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-118692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::linkclicked that allows attackers to execute commands by embedding shell...

RHEL 6 : ca-certificates and nss (RHSA-2026:90985)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90985 advisory. The ca-certificates package contains a set of Certificate Authority CA certificates chosen by the Mozilla Foundation for use with the Internet Publi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: perl-DBI (UTSA-2026-147040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147040 advisory. Unity Link Advisory UTSA-2026-147040 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

AlmaLinux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793267498)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793267498 advisory. - Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library...