RHEL 10 : gstreamer1-plugins-good (RHSA-2026:99140)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99140 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...

Rocky Linux 9 [CIQ] Security Update: pki-jackson-databind (crlsa-2026_98492)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202698492 advisory. com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion...

RHEL 10 : gstreamer1 (RHSA-2026:99129)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99129 advisory. The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fixes: gstreamer:...

Linux Distros Unpatched Vulnerability : CVE-2026-123877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter...

Debian dla-4893 : octavia-agent - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4893 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4893-1 [email protected]...

RHEL 9 : gnome-remote-desktop (RHSA-2026:99136)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:99136 advisory. GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop...

RHEL 9 : gimp (RHSA-2026:99154)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99154 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including...

SUSE SLED15 / SLES15 Security Update : tar (SUSE-SU-2026:5160-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5160-1 advisory. - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape bsc1274489. -...

openSUSE 16 Security Update : python-graphql-core (openSUSE-SU-2026:22258-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22258-1 advisory. Changes in python-graphql-core: - CVE-2026-75507: Fix quadratic complexity in OverlappingFieldsCanBeMerged validation rule when comparing nested...

RHEL 9 : oci-seccomp-bpf-hook (RHSA-2026:99169)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:99169 advisory. OCI Hook to generate seccomp json files based on EBF syscalls used by container oci-seccomp-bpf-hook provides a library for applications...

RHEL 9 : squid (RHSA-2026:99124)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:99124 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: squid: Request...

SUSE SLES15: proftpd / proftpd-devel / proftpd-doc / proftpd-lang / proftpd-ldap / etc (SUSE-SU-2026:5181-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5181-1 advisory. - Authenticated SFTP sessions can overflow the SFTP packet buffer bsc1271096. - CVE-2026-35025: access control bypass allows...

Linux Distros Unpatched Vulnerability : CVE-2026-123868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated HTTP/2 client can exhaust Node.js server memory because inbound DATA queued on an undrained stream is charged to no session budget. Each...

Rocky Linux 9 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2026_97855)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202697855 advisory. nodejs: Node.js: Permission Model bypass via process.report.writeReport path misvalidation CVE-2026-48617 nodejs: Node.js HTTP Agent: Information disclosu...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:5198-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:5198-1 advisory. This update for openssl-11-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:5208-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:5208-1 advisory. This update for openssl-11-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset...

Linux Distros Unpatched Vulnerability : CVE-2026-123862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An uncatchable exception in the Node.js zlib streaming API lets a peer crash a process by disconnecting while data is being compressed. zlib.params queues a flu...

Linux Distros Unpatched Vulnerability : CVE-2026-123865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors. If a peer triggers a protocol error, for example an oversized...

Rocky Linux 8 [CIQ] Security Update: nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2026_98113)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202698113 advisory. brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns CVE-2026-102278 brace-expansion: brace-expansion:...

SUSE SLED15 / SLES15 Security Update : python-M2Crypto (SUSE-SU-2026:5204-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5204-1 advisory. This update for python-M2Crypto fixes the following issue: - CVE-2026-109087: SSL.Checker subjectAltName hostname...

RHEL 9 : .NET 8.0 (RHSA-2026:99146)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99146 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

Rocky Linux 9 [CIQ] Security Update: dpdk / dpdk-debuginfo / dpdk-debugsource / dpdk-devel / dpdk-doc / etc Multiple Vulnerabilities (crlsa-2026_98505)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202698505 advisory. dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup CVE-2026-86561 dpdk: dpdk: Control-queue descriptor double-fetch...

Debian dla-4894 : python3-watcher - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4894 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4894-1 [email protected] https://www.debian.org/lts/security/...

RHEL 10 : perl-CGI (RHSA-2026:99212)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:99212 advisory. CGI.pm is a stable, complete and mature solution for processing and preparing HTTP requests and responses. Major features including...

Linux Distros Unpatched Vulnerability : CVE-2026-123828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A one-byte heap buffer overflow in Node.js HTTP/2 Alt-Svc handling lets a remote, unauthenticated attacker corrupt process memory. When an application passes an...

SUSE SLES15 Security Update : aliyun-cli (SUSE-SU-2026:5195-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5195-1 advisory. - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index...

openSUSE 16 Security Update : rust-keylime (openSUSE-SU-2026:22249-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22249-1 advisory. This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central...

Rocky Linux 9 [CIQ] Security Update: tesseract / tesseract-debuginfo / tesseract-debugsource / etc Multiple Vulnerabilities (crlsa-2026_98514)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202698514 advisory. tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data CVE-2026-88048 tesseract: Tesseract: Stack buffer...

SUSE SLED15: apache-commons-cli / aqute-bndlib / glassfish-annotation-api / etc (SUSE-SU-2026:5189-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5189-1 advisory. apache-parent was updated to 40: Breaking changes - Replace nicoulaj checksum plugin with maveniverse checksum...

Linux Distros Unpatched Vulnerability : CVE-2026-123875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in Node.js HTTP/2 lets an unauthenticated client crash the server, over both TLS and cleartext, by cancelling file downloads. When th...

SUSE SLES15 Security Update : haproxy (SUSE-SU-2026:5170-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:5170-1 advisory. This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line bsc1285046. Tenable has extracted the...

JetBrains PyCharm < 2026.2.4 Certificate Validation (CVE-2026-118697)

According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2026.2.4. It is, therefore, affected by a certificate validation vulnerability. In JetBrains PyCharm before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate...

SUSE SLED15: libfreebl3 / libfreebl3-32bit / libsoftokn3 / libsoftokn3-32bit / etc (SUSE-SU-2026:5168-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5168-1 advisory. This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA bsc1286261. Change...

Linux Distros Unpatched Vulnerability : CVE-2026-123829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Permission Model bypass in Node.js recursive file watching discloses the names of files and directories the process is not permitted to read. On macOS and...

Linux Distros Unpatched Vulnerability : CVE-2026-100290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory...

Linux Distros Unpatched Vulnerability : CVE-2026-123866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Node.js HTTP/2 stream teardown can leak response memory, including the contents of other connections' response buffers, to a peer. When a...

Rocky Linux 9 [CIQ] Security Update: librsvg2 / librsvg2-debuginfo / librsvg2-debugsource / etc (crlsa-2026_98482)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202698482 advisory. librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 Tenable has extracted the preceding description block directly...

RHEL 10 : mutter (RHSA-2026:99141)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99141 advisory. Mutter is a compositing window manager that displays and manages desktop through OpenGL. It combines the window-management logic inherited from the...

JetBrains YouTrack < 2026.2.19562 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19562. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.19562 missing authorization in the saved query endpoint allowed disclosure of issue descriptions. CVE-2026-123327 ...

openSUSE 16 Security Update : zchunk (openSUSE-SU-2026:22250-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22250-1 advisory. This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in readpreface allows attackers to cause an application cra...

JetBrains PyCharm < 2026.2.1 Multiple Vulnerabilities

According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2026.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools. CVE-2026-75060 - In...

JetBrains YouTrack < 2025.3.169041 / 2026.1.x < 2026.1.14137 / 2026.2.x < 2026.2.19562 Missing Authorization (CVE-2026-123335)

The version of JetBrains YouTrack installed on the remote host is prior to 2025.3.169041, or 2026.1.x prior to 2026.1.14137, or 2026.2.x prior to 2026.2.19562. It is, therefore, affected by a missing authorization vulnerability: - In JetBrains YouTrack before 2026.2.19562, 2026.1.14137,...

RHEL 9 : gstreamer1 (RHSA-2026:99228)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99228 advisory. The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fixes: gstreamer:...

SUSE SLED15 / SLES15 Security Update : poppler, poppler-qt5 (SUSE-SU-2026:5176-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5176-1 advisory. - CVE-2026-93313: JBIG2 stream processing can cause integer overflows bsc1282532. - CVE-2026-93314: TrueType...

JetBrains YouTrack < 2026.2.19728 Attachment Size Limit Bypass (CVE-2026-123336)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.19728. It is, therefore, affected by an attachment size limit bypass vulnerability: - In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion...

RHEL 9 : python-oauthlib (RHSA-2026:99167)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:99167 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

SUSE SLED15 / SLES15 Security Update : containerd (SUSE-SU-2026:5201-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5201-1 advisory. - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via...

RHEL 9 : patch (RHSA-2026:99161)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:99161 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to...

Rocky Linux 9 [CIQ] Security Update: fetchmail / fetchmail-debuginfo / fetchmail-debugsource (crlsa-2026_98480)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202698480 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description block...

RHEL 10 : gnome-remote-desktop (RHSA-2026:99125)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:99125 advisory. GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop:...