Fedora 43 : perl-Starlet (2026-092670ec3e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-092670ec3e advisory. Starlet 0.33 fixes several security issues in the Starlet code: prevent excessive CPU use when parsing malformed chunk-size lines bound read...

MiracleLinux 8 : firefox-153.6.0-1.el8_10.ML.1 (AXSA:2026-2292:32)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2292:32 advisory. firefox: thunderbird: Privilege escalation in the DLL Services component CVE-2026-100801 firefox: thunderbird: Invalid pointer in the JavaScript...

Linux Distros Unpatched Vulnerability : CVE-2026-123584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client UDP connection receives a datagram that cannot be...

Fedora 45 : python3-docs / python3.15 (2026-f3fe9323aa)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-f3fe9323aa advisory. Bugfix Python release 3.15.2 https://www.python.org/downloads/release/python-3152/ Tenable has extracted the preceding description block directly fr...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:5140-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5140-1 advisory. Security issues fixed: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper...

Fedora 43 : dnf5 (2026-5879bc27e1)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5879bc27e1 advisory. This release fixes CVE-2026-111253 dnf5daemon-server: missing session-owner check allows foreign D-Bus callers to replace another client's resolved transacti...

Ubuntu 20.04 LTS / 22.04 LTS : pyasn1 vulnerabilities (USN-9011-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-9011-1 advisory. It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker cou...

Linux Distros Unpatched Vulnerability : CVE-2026-124584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in wummel patool 4.1.0. This vulnerability affects the function extractgzip of the file patoolib/fileutil.py of the component Gzi...

SUSE SLED15 / SLES15 Security Update : zchunk (SUSE-SU-2026:5138-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5138-1 advisory. This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in readpreface allows...

Linux Distros Unpatched Vulnerability : CVE-2026-124031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC through 26.07.0 contains a type confusion vulnerability in drawablegetaspect2dmpeg4 and TraverseShape that casts a Shape's appearance node to MAppearance...

SUSE SLES15: dpdk22 / dpdk22-devel / dpdk22-kmp-default / dpdk22-thunderx / etc (SUSE-SU-2026:5135-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5135-1 advisory. - CVE-2026-86561: missing memory size validation before mmap in vhost memory region setup bsc1285678. - CVE-2026-86563: double offs...

Linux Distros Unpatched Vulnerability : CVE-2026-113431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowlib allows an unauthenticated remote peer to exhaust the memory of an HTTP/2...

Fedora 44 : perl-Net-IDN-Encode (2026-effb380a7c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-effb380a7c advisory. Version 2.600 of Net::IDN::Encode fixes multiple CVEs: CVE-2026-74766, a heap use-after-free in the XS decodepunycode CVE-2026-74765, an integer...

Fedora 44 : perl-CGI (2026-516e427bac)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-516e427bac advisory. 5.02 bump - Fix CVE-2026-120631 CGI::Cookie-parse backtracking DoS via cookie expires regex - Fix CVE-2026-120632 cubic regex backtracking via craft...

Fedora 46 : ffmpeg / openapv (2026-a971aa459f)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a971aa459f advisory. Latest OpenAPV release. Changes: https://github.com/AcademySoftwareFoundation/openapv/releases/tag/v1.1.3.0 . Includes FFmpeg rebuild against the new ABI...

SUSE SLED15 / SLES15 Security Update : aspell (SUSE-SU-2026:5134-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5134-1 advisory. - CVE-2026-75818: heap-based buffer overflow in the decompressor in prog/prezip.c can lead to memory corruptio...

SUSE SLES15 Security Update : libjxl (SUSE-SU-2026:5131-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:5131-1 advisory. This update for libjxl fixes the following issue: - CVE-2026-82522: integer underflow via 64-bit box size truncation on 32-bit systems can lead to...

Fedora 44 : bind (2026-cf9d4ec5e6)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cf9d4ec5e6 advisory. Security Fixes: - CVE-2026-94300 Fix remote termination of named under concurrent GSS-TSIG traffic rhbz2558420 - CVE-2026-97313 Fix a bug when...

Ubuntu 20.04 LTS / 22.04 LTS : OpenJDK 8 vulnerabilities (USN-9009-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-9009-1 advisory. It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this...

Linux Distros Unpatched Vulnerability : CVE-2026-123532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gix-fs in gitoxide before 0.24.1 contains a credential disclosure vulnerability that allows remote attackers to capture NTLM credentials by supplying UNC symlin...

Linux Distros Unpatched Vulnerability : CVE-2025-54991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS declared the...

Linux Distros Unpatched Vulnerability : CVE-2026-124586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in Tencent RapidJSON 1.1.0. Impacted is the function GetCachedPowerByIndex in the library include/rapidjson/internal/diyfp.h. Thi...

Linux Distros Unpatched Vulnerability : CVE-2026-123587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC records by comparing the next domain name to an SOA...

SUSE SLED15: PackageKit / PackageKit-backend-zypp / PackageKit-devel / etc (SUSE-SU-2026:5143-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5143-1 advisory. - CVE-2026-104619: PackageKit ZYpp rollback vulnerability bsc1284389. - CVE-2026-104620: local privilege...

Ubuntu 20.04 LTS / 22.04 LTS : OpenJDK 11 vulnerabilities (USN-9010-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-9010-1 advisory. It was discovered that the Security component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this...

Fedora 45 : perl-CGI (2026-a04615c725)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a04615c725 advisory. 5.02 bump - Fix CVE-2026-120631 CGI::Cookie-parse backtracking DoS via cookie expires regex - Fix CVE-2026-120632 cubic regex backtracking via craft...

Fedora 45 : perl-Starlet (2026-7d9cd72397)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7d9cd72397 advisory. Starlet 0.33 fixes several security issues in the Starlet code: prevent excessive CPU use when parsing malformed chunk-size lines bound read allocations for...

Linux Distros Unpatched Vulnerability : CVE-2026-123592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation bypass because Name's Hash ignores label lengths and ValidationCacheKe...

SUSE SLES15: PackageKit / PackageKit-backend-zypp / PackageKit-devel / etc (SUSE-SU-2026:5142-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5142-1 advisory. This update for PackageKit fixes the following issue: - CVE-2026-104620: local privilege escalation by any local user can call InstallFiles...

Linux Distros Unpatched Vulnerability : CVE-2026-123607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3...

Linux Distros Unpatched Vulnerability : CVE-2025-55002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS shipped with Electron's RunAsNode fu...

Fedora 44 : libmodulemd (2026-d657495ea3)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d657495ea3 advisory. This release rejects YAML files which decompress to much CVE-2026-92823, rejects YAML documents with YAML tree deeper than 64 CVE-2026-92822, fixes...

MiracleLinux 8 : util-linux-2.32.1-50.el8_10 (AXSA:2026-2293:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2293:04 advisory. util-linux: util-linux: heap use-after-free in libblkid nested partition probing CVE-2026-13595 util-linux: TOCTOU in the mount program via ancestor...

Fedora 43 : kernel / kernel-headers (2026-1028a81d8a)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-1028a81d8a advisory. The 7.3.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree. Tenable has extracted the...

Ubuntu 22.04 LTS : libnfs vulnerability (USN-9008-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-9008-1 advisory. It was discovered that libnfs did not properly enforce the maximum size bound during ZDR decoding, resulting in an out-of-bounds write. An attacker could possibly...

SUSE SLED15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:5145-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5145-1 advisory. Update to Firefox Extended Support Release 153.6.0 ESR MFSA 2026-112, MFSA 2026-120, bsc1286385: -...

Fedora 45 : perl-Net-IDN-Encode (2026-f6acaf8756)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f6acaf8756 advisory. Version 2.600 of Net::IDN::Encode fixes multiple CVEs: CVE-2026-74766, a heap use-after-free in the XS decodepunycode CVE-2026-74765, an integer...

Linux Distros Unpatched Vulnerability : CVE-2026-115701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process...

Linux Distros Unpatched Vulnerability : CVE-2026-123655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. Insufficient access control checks on H5P content files allow unauthenticated remote attackers to view restricted materials, includi...

Ubuntu 20.04 LTS / 22.04 LTS : Fetchmail vulnerabilities (USN-9013-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-9013-1 advisory. Christian Herdtweck discovered that Fetchmail incorrectly handled certain long log messages. A remote attacker could possibly use this issue to cause...

Fedora 43 : perl-CGI (2026-a3a026d9ff)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a3a026d9ff advisory. 5.02 bump - Fix CVE-2026-120631 CGI::Cookie-parse backtracking DoS via cookie expires regex - Fix CVE-2026-120632 cubic regex backtracking via craft...

Fedora 43 : python3-docs / python3.14 (2026-1520dedf55)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-1520dedf55 advisory. New version of the Python interpreter ---- New version of the Python interpreter Tenable has extracted the preceding description block directly from...

Fedora 45 : kernel / kernel-headers (2026-655049a906)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-655049a906 advisory. The 7.3.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree. Tenable has extracted the...

Fedora 44 : perl-Starlet (2026-bd36d053a1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bd36d053a1 advisory. Starlet 0.33 fixes several security issues in the Starlet code: prevent excessive CPU use when parsing malformed chunk-size lines bound read...

Fedora 43 : perl-Net-IDN-Encode (2026-3cb8ce0117)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3cb8ce0117 advisory. Version 2.600 of Net::IDN::Encode fixes multiple CVEs: CVE-2026-74766, a heap use-after-free in the XS decodepunycode CVE-2026-74765, an integer...

SUSE SLED15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2026:5133-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5133-1 advisory. - CVE-2026-93313: JBIG2 stream processing can cause integer overflows bsc1282532. - CVE-2026-93314: TrueType...

SUSE SLES15: PackageKit / PackageKit-backend-zypp / PackageKit-devel / etc (SUSE-SU-2026:5144-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5144-1 advisory. - CVE-2026-41651: local root exploit security vulnerability bsc1262220. - CVE-2026-104620: local privilege escalation by any local...

Atlassian Confluence < 9.2.28 (CONFSERVER-104610)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104610 advisory. - UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a...

Fedora 45 : libmodulemd (2026-946f33e2c8)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-946f33e2c8 advisory. This release rejects YAML files which decompress to much CVE-2026-92823, rejects YAML documents with YAML tree deeper than 64 CVE-2026-92822, fixes...

Fedora 44 : kernel / kernel-headers (2026-0e28591060)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-0e28591060 advisory. The 7.3.3 stable kernel rebase contains new features, improved hardware support, and a number of important fixes across the tree. Tenable has extracted the...