Fedora 44 : perl-CGI (2026-516e427bac)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-516e427bac advisory. 5.02 bump - Fix CVE-2026-120631 CGI::Cookie-parse backtracking DoS via cookie expires regex - Fix CVE-2026-120632 cubic regex backtracking via craft...

Linux Distros Unpatched Vulnerability : CVE-2026-123584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client UDP connection receives a datagram that cannot be...

Fedora 44 : bind (2026-cf9d4ec5e6)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cf9d4ec5e6 advisory. Security Fixes: - CVE-2026-94300 Fix remote termination of named under concurrent GSS-TSIG traffic rhbz2558420 - CVE-2026-97313 Fix a bug when...

SUSE SLED15 / SLES15 Security Update : zchunk (SUSE-SU-2026:5138-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5138-1 advisory. This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in readpreface allows...

Fedora 45 : python3-docs / python3.15 (2026-f3fe9323aa)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-f3fe9323aa advisory. Bugfix Python release 3.15.2 https://www.python.org/downloads/release/python-3152/ Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : firefox-153.6.0-1.el8_10.ML.1 (AXSA:2026-2292:32)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2292:32 advisory. firefox: thunderbird: Privilege escalation in the DLL Services component CVE-2026-100801 firefox: thunderbird: Invalid pointer in the JavaScript...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:5140-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5140-1 advisory. Security issues fixed: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper...

Fedora 46 : ffmpeg / openapv (2026-a971aa459f)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a971aa459f advisory. Latest OpenAPV release. Changes: https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v1.1.3.0 . Includes FFmpeg rebuild against the new ABI...

SUSE SLES15 Security Update : libjxl (SUSE-SU-2026:5131-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:5131-1 advisory. This update for libjxl fixes the following issue: - CVE-2026-82522: integer underflow via 64-bit box size truncation on 32-bit systems can lead to...

Linux Distros Unpatched Vulnerability : CVE-2026-124031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC through 26.07.0 contains a type confusion vulnerability in drawablegetaspect2dmpeg4 and TraverseShape that casts a Shape's appearance node to MAppearance...

Linux Distros Unpatched Vulnerability : CVE-2026-113431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowlib allows an unauthenticated remote peer to exhaust the memory of an HTTP/2...

Linux Distros Unpatched Vulnerability : CVE-2025-54991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS declared the...

Linux Distros Unpatched Vulnerability : CVE-2026-123587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC records by comparing the next domain name to an SOA...

Linux Distros Unpatched Vulnerability : CVE-2026-123532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gix-fs in gitoxide before 0.24.1 contains a credential disclosure vulnerability that allows remote attackers to capture NTLM credentials by supplying UNC symlin...

Ubuntu 20.04 LTS / 22.04 LTS : OpenJDK 8 vulnerabilities (USN-9009-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-9009-1 advisory. It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this...

Fedora 45 : perl-CGI (2026-a04615c725)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a04615c725 advisory. 5.02 bump - Fix CVE-2026-120631 CGI::Cookie-parse backtracking DoS via cookie expires regex - Fix CVE-2026-120632 cubic regex backtracking via craft...

Linux Distros Unpatched Vulnerability : CVE-2026-123592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation bypass because Name's Hash ignores label lengths and ValidationCacheKe...

Ubuntu 20.04 LTS / 22.04 LTS : OpenJDK 11 vulnerabilities (USN-9010-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-9010-1 advisory. It was discovered that the Security component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this...

SUSE SLES15: PackageKit / PackageKit-backend-zypp / PackageKit-devel / etc (SUSE-SU-2026:5142-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5142-1 advisory. This update for PackageKit fixes the following issue: - CVE-2026-104620: local privilege escalation by any local user can call InstallFiles...

Fedora 45 : perl-Starlet (2026-7d9cd72397)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7d9cd72397 advisory. Starlet 0.33 fixes several security issues in the Starlet code: prevent excessive CPU use when parsing malformed chunk-size lines bound read allocations for...

SUSE SLED15: PackageKit / PackageKit-backend-zypp / PackageKit-devel / etc (SUSE-SU-2026:5143-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5143-1 advisory. - CVE-2026-104619: PackageKit ZYpp rollback vulnerability bsc1284389. - CVE-2026-104620: local privilege...

Fedora 44 : kernel / kernel-headers (2026-0e28591060)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-0e28591060 advisory. The 7.3.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree. Tenable has extracted the...

Fedora 44 : perl-Starlet (2026-bd36d053a1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bd36d053a1 advisory. Starlet 0.33 fixes several security issues in the Starlet code: prevent excessive CPU use when parsing malformed chunk-size lines bound read...

Fedora 43 : kernel / kernel-headers (2026-1028a81d8a)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-1028a81d8a advisory. The 7.3.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree. Tenable has extracted the...

Fedora 43 : python3-docs / python3.14 (2026-1520dedf55)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-1520dedf55 advisory. New version of the Python interpreter ---- New version of the Python interpreter Tenable has extracted the preceding description block directly from...

Linux Distros Unpatched Vulnerability : CVE-2026-123655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. Insufficient access control checks on H5P content files allow unauthenticated remote attackers to view restricted materials, includi...

Fedora 43 : perl-CGI (2026-a3a026d9ff)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a3a026d9ff advisory. 5.02 bump - Fix CVE-2026-120631 CGI::Cookie-parse backtracking DoS via cookie expires regex - Fix CVE-2026-120632 cubic regex backtracking via craft...

SUSE SLED15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2026:5133-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5133-1 advisory. - CVE-2026-93313: JBIG2 stream processing can cause integer overflows bsc1282532. - CVE-2026-93314: TrueType...

Fedora 45 : libmodulemd (2026-946f33e2c8)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-946f33e2c8 advisory. This release rejects YAML files which decompress to much CVE-2026-92823, rejects YAML documents with YAML tree deeper than 64 CVE-2026-92822, fixes...

Fedora 45 : perl-Net-IDN-Encode (2026-f6acaf8756)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f6acaf8756 advisory. Version 2.600 of Net::IDN::Encode fixes multiple CVEs: CVE-2026-74766, a heap use-after-free in the XS decodepunycode CVE-2026-74765, an integer...

Ubuntu 22.04 LTS : libnfs vulnerability (USN-9008-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-9008-1 advisory. It was discovered that libnfs did not properly enforce the maximum size bound during ZDR decoding, resulting in an out-of-bounds write. An attacker could possibly...

CentOS Linux 7 [TuxCare] Security Update: giflib / giflib-devel / giflib-utils (CENTOS7:CLSA-2026:1793710801)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793710801 advisory. - Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The...

Fedora 44 : copyparty (2026-4d013a5c67)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4d013a5c67 advisory. New upstream release. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

AlmaLinux 9.6 [TuxCare] Security Update: netpbm / netpbm-devel / netpbm-doc / netpbm-progs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794238162)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794238162 advisory. - Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to...

RHEL 10 : ruby4.0 (RHSA-2026:96233)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:96233 advisory. Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and ...

Linux Distros Unpatched Vulnerability : CVE-2026-123596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recursor's NSEC...

Linux Distros Unpatched Vulnerability : CVE-2026-123608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through...

RHEL 9 : ruby:3.3 (RHSA-2026:96068)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:96068 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

SUSE SLES12: libfreebl3 / libfreebl3-32bit / libsoftokn3 / libsoftokn3-32bit / etc (SUSE-SU-2026:5126-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5126-1 advisory. This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA bsc1286261. Changes for mozilla-nss: -...

RHEL 8 : glibc (RHSA-2026:96087)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:96087 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

RHEL 8 : qt5-qtbase (RHSA-2026:96089)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:96089 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

Linux Distros Unpatched Vulnerability : CVE-2026-123605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hickory DNS hickory-proto 0.1 through 0.25.0-alpha.3 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because the validator verifies an RRSIG...

Rocky Linux 9.6 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc (ALMALINUX9.6:CLSA-2026:1794223983)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794223983 advisory. - Use after free in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside...

Unity Linux 20.1070e Security Update: bind (UTSA-2026-150946)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150946 advisory. In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the...

AlmaLinux 9.2 [TuxCare] Security Update: netpbm / netpbm-devel / netpbm-doc / netpbm-progs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1794237821)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1794237821 advisory. - Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam that allows attackers to...

TencentOS Server 4: grafana (TSSA-2026:1370)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1370 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

RHEL 7 : python-jwt (RHSA-2026:96084)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:96084 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

CentOS Linux 8.5 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS8.5:CLSA-2026:1794243685)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1794243685 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c...

Unity Linux 20.1070e Security Update: firefox (UTSA-2026-150995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150995 advisory. Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird...

Amazon Linux 2 : librsvg2 (ALAS-2026-4070)

The version of librsvg2 installed on the remote host is prior to 2.40.20-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4070 advisory. A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity...