Fedora 44 : rust-sequoia-sq (2026-2aeda2e0f8)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2aeda2e0f8 advisory. Rebuilt with webpki-roots 1.0.11 removed emSign Root CA - C1/C3 This provides added protection against trusting compromised certificates. Tenable has extract...

Fedora 45 : rust-rbw (2026-12c8566832)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-12c8566832 advisory. Rebuilt with webpki-roots 1.0.11 removed emSign Root CA - C1/C3 This provides added protection against trusting compromised certificates. Tenable has extract...

Fortinet FortiAnalyzer Improper neutralization of special elements used in an OS command (FG-IR-26-246)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-246 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

RHEL 10 : librsvg2 (RHSA-2026:98591)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98591 advisory. The librsvg2 packages provide a Scalable Vector Graphics SVG library based on the libart library. Security Fixes: librsvg: Use-after-free when XML...

RHEL 10 : cockpit-files (RHSA-2026:98566)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98566 advisory. A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Critical) (RHSA-2026:99006)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:99006 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers ca...

RHEL 8 : vim (RHSA-2026:98119)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98119 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vimscript injection via unescaped filename in netrw...

Rocky Linux 10.2 [CIQ] Security Update: edk2-aarch64 / edk2-debugsource / edk2-ovmf / edk2-tools / etc (crlsa-2026_96240)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202696240 advisory. edk2: Pre-boot RCE in EDK II PXE driver CVE-2026-97631 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

RHEL 9 : RHEL AI 3.4 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:99036)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99036 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

RHEL 9 : RHEL AI 3.0 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:99037)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99037 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

Fortinet Fortigate Broken Access Control in Two-Factor-Authentication (FG-IR-26-195)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-195 advisory. - A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker t...

Fedora 45 : rust-pulldown-cmark (2026-75144eedff)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-75144eedff advisory. Update to version 0.13.6. Includes fixes for two issues that can result in quadratic or exponential parsing behaviour when enabling the off-by-default...

RHEL 9 : gimp (RHSA-2026:98462)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98462 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

Rocky Linux 8 [CIQ] Security Update: patch / patch-debuginfo / patch-debugsource (crlsa-2026_96215)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202696215 advisory. patch: Filename validation bypass in reversal fallback allows file creation outside the working directory CVE-2026-115207 Tenable has extracted the preceding...

RHEL 9 : expat (RHSA-2026:98478)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98478 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: Expat: Denial of Service via quadratic complexity in attribute...

Fortinet FortiAnalyzer Authentication bypass by spoofing (FG-IR-26-229)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-229 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiAnalyzer Improper limitation of a pathname to a restricted directory in apache_mod (FG-IR-26-250)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-250 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet Fortigate Numeric truncation error (FG-IR-26-268)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-268 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Fortinet FortiManager (FG-IR-26-220)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-220 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiManager Authentication bypass by spoofing (FG-IR-26-229)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-229 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiAnalyzer Use of externally-controlled format string (FG-IR-26-245)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-245 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiAnalyzer Improper neutralization of special elements used in a template engine (FG-IR-26-249)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-249 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiClient Origin validation error in local API endpoint (FG-IR-26-194)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-194 advisory. - A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through...

Fortinet Fortigate SSLVPN Improper Certificate Validation (FG-IR-26-193)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-193 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Fortinet Fortigate Unauthenticated adjacent command execution via HA (FG-IR-26-273)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-273 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Fortinet FortiManager XML injection (FG-IR-26-222)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-222 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...

RHEL 9 : libxml2 (RHSA-2026:98468)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98468 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2:...

RHEL 10 : rsyslog (RHSA-2026:98558)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98558 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering ...

RHEL 9 : perl-URI (RHSA-2026:98472)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98472 advisory. This module implements the URI class. Objects of this class represent Uniform Resource Identifier references as specified in RFC 2396 and updated by...

RHEL 10 : cockpit (RHSA-2026:98567)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98567 advisory. Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic...

Alibaba Cloud Linux 3 : 0344: environment-modules (ALINUX3-SA-2026:0344)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0344 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-85013: A flaw was found in...

Oracle Linux 8 : util-linux (ELSA-2026-96212)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-96212 advisory. - fix RHEL-283368 - libblkid: validate EBR data CVE-2026-53615 - fix RHEL-215636 - libblkid: use-after-free in nested partition probing CVE-2026-13595...

AlmaLinux 9.6 [TuxCare] Security Update: libsndfile / libsndfile-devel / libsndfile-utils (ALMALINUX9.6:CLSA-2026:1794405483)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794405483 advisory. - A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the...

AlmaLinux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794406467)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794406467 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copymodel in...

Rocky Linux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794406467)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794406467 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copymodel ...

RHEL 10 : openssh (RHSA-2026:98073)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98073 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...

RHEL 10 : python-tornado (RHSA-2026:98080)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98080 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

RHEL 9 : libsoup (RHSA-2026:98453)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98453 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: SoupWebsocketExtensionDeflate: libsoup: libsoup:...

RHEL 9 : dovecot (RHSA-2026:98477)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98477 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

RHEL 9 : xz (RHSA-2026:98486)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98486 advisory. XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv- Markov chain algorithm LZMA, which performs...

RHEL 9 : resteasy (RHSA-2026:98494)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98494 advisory. RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully...

RHEL 9 : gimp (RHSA-2026:98495)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98495 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

RHEL 9 : freerdp (RHSA-2026:98508)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98508 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

RHEL 9 : raptor2 (RHSA-2026:98509)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98509 advisory. Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security...

RHEL 9 : xdg-dbus-proxy (RHSA-2026:98530)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98530 advisory. xdg-dbus-proxy is a filtering proxy for D-Bus connections. It was originally part of the flatpak project, but it has been broken out as a standalone...

RHEL 9 : qt5-qtdeclarative (RHSA-2026:98531)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98531 advisory. Qt5 - QtDeclarative component. Security Fixes: qt5-qtdeclarative: qt6-qtdeclarative: Improper validation of tag size in Text component parser...

RHEL 10 : tftp (RHSA-2026:98563)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98563 advisory. The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-serve...

RHEL 10 : NetworkManager (RHSA-2026:98586)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98586 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

RHEL 10 : freerdp (RHSA-2026:98598)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98598 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

RHEL 10 : jq (RHSA-2026:98603)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:98603 advisory. jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or...