EulerOS Virtualization 2.15.0 : python3 (EulerOS-SA-2026-4611)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorit...

EulerOS Virtualization 2.15.1 : sed (EulerOS-SA-2026-4672)

According to the versions of the sed package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When sed is invoked with both -i in-place edit and --follow-symlinks, the function opennextfile performs two separate, non-atomic...

EulerOS Virtualization 2.15.1 : dhcp (EulerOS-SA-2026-4751)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a speciall...

EulerOS Virtualization 2.15.0 : libusbx (EulerOS-SA-2026-4825)

According to the versions of the libusbx package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by...

EulerOS Virtualization 2.15.1 : perl-DBI (EulerOS-SA-2026-4779)

According to the versions of the perl-DBI package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.The...

EulerOS Virtualization 2.15.1 : python-pyasn1 (EulerOS-SA-2026-4667)

According to the versions of the python-pyasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

EulerOS Virtualization 2.15.1 : ca-certificates (EulerOS-SA-2026-4630)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

EulerOS Virtualization 2.15.1 : libpcap (EulerOS-SA-2026-4559)

According to the versions of the libpcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8...

EulerOS Virtualization 2.15.0 : perl-IO-Compress (EulerOS-SA-2026-4840)

According to the versions of the perl-IO-Compress package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled outp...

EulerOS Virtualization 2.15.1 : python-urllib3 (EulerOS-SA-2026-4574)

According to the versions of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP...

EulerOS Virtualization 2.15.0 : systemd (EulerOS-SA-2026-4735)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel...

EulerOS Virtualization 2.15.0 : rsync (EulerOS-SA-2026-4729)

According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list...

EulerOS Virtualization 2.15.1 : python-pip (EulerOS-SA-2026-4572)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in...

EulerOS Virtualization 2.15.0 : gdb (EulerOS-SA-2026-4593)

According to the versions of the gdb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfdelfgcrecordvtentry of the file bfd/elflink.c of the...

Linux Distros Unpatched Vulnerability : CVE-2026-120222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the cache interceptor is composed with a downstream handle...

EulerOS Virtualization 2.15.0 : libsolv (EulerOS-SA-2026-4822)

According to the versions of the libsolv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect...

EulerOS Virtualization 2.15.0 : libarchive (EulerOS-SA-2026-4702)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper...

Rocky Linux 9 [CIQ] Security Update: tesseract / tesseract-debuginfo / tesseract-debugsource / etc Multiple Vulnerabilities (crlsa-2026_95086)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695086 advisory. tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data CVE-2026-88048 tesseract: Tesseract: Stack buffer...

AlmaLinux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (ALMALINUX9.6:CLSA-2026:1794052653)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794052653 advisory. - ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled...

EulerOS Virtualization 2.15.0 : protobuf (EulerOS-SA-2026-4610)

According to the versions of the protobuf packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit...

EulerOS Virtualization 2.15.0 : bzip2 (EulerOS-SA-2026-4807)

According to the versions of the bzip2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an...

Rocky Linux 8 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-devel / etc (crlsa-2026_95482)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202695482 advisory. gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader loadresource1033 CVE-2026-112257 Bug Fixes and Enhancements: gimp: xpm poc file for CVE-2026-4154...

EulerOS Virtualization 2.15.0 : perl-HTTP-Tiny (EulerOS-SA-2026-4717)

According to the versions of the perl-HTTP-Tiny package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.The...

Rocky Linux 9 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource Multiple Vulnerabilities (crlsa-2026_95518)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695518 advisory. crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-97031 crypto/x509: golang: crypto/x509:...

Rocky Linux 9 [CIQ] Security Update: osbuild-composer / osbuild-composer-core / etc (crlsa-2026_95272)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202695272 advisory. google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-84445 Tenable has extracted the preceding description block directly from th...

EulerOS Virtualization 2.15.1 : python-lxml (EulerOS-SA-2026-4663)

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the...

Linux Distros Unpatched Vulnerability : CVE-2026-123785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu in src/FbTk/Menu.cc that allows attackers to hang the window manager via craft...

Linux Distros Unpatched Vulnerability : CVE-2026-120474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, when the redirect interceptor and a shared response cache are...

Linux Distros Unpatched Vulnerability : CVE-2026-100080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after...

Linux Distros Unpatched Vulnerability : CVE-2026-123976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in checkedffile that allows attackers to overflow the 256-element annotch array by supplyin...

Linux Distros Unpatched Vulnerability : CVE-2026-123125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal addresses ar...

Linux Distros Unpatched Vulnerability : CVE-2026-122053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony Serializer component ObjectNormalizer treats any attribute name containing . and, from Symfony 6.4, as a writable property path, allowing untrusted...

Linux Distros Unpatched Vulnerability : CVE-2026-102523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT...

RHEL 8 : qt5-qtbase (RHSA-2026:95619)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95619 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

TeamViewer < 13.2.36231 / 14.x < 14.7.48868 / 15.x < 15.64.10 / 15.65.x < 15.83 Heap Overflow (TV-2026-1011)

The version of TeamViewer installed on the remote Windows host is prior to 13.2.36231, 14.x prior to 14.7.48868, 15.x prior to 15.64.10, or 15.65.x prior to 15.83. It is, therefore, affected by a vulnerability as referenced in the TV-2026-1011 advisory: - An integer overflow in the remote-control...

EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-4465)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An out-of-bounds read flaw was found in the X.Org X server and Xwayland in glXDispChangeDrawableAttributes. A wrong size validation check...

RHEL 8 : gimp:2.8 (RHSA-2026:95482)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:95482 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including...

EulerOS 2.0 SP12 : sg3_utils (EulerOS-SA-2026-4532)

According to the versions of the sg3utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing...

RHEL 9 : kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, kpatch-patch-5_14_0-284_172_1, and kpatch-patch-5_14_0-284_188_1 (RHSA-2026:95600)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95600 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

EulerOS 2.0 SP12 : perl-XML-LibXML (EulerOS-SA-2026-4517)

According to the versions of the perl-XML-LibXML package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

Linux Distros Unpatched Vulnerability : CVE-2026-122006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write operations e.g., reading...

Fedora 45 : sofia-sip (2026-3b906c3607)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3b906c3607 advisory. Upstream release 1.13.19. ---- Patch for out-of-bounds read in msgmultipartparse. Tenable has extracted the preceding description block directly fro...

RHEL 9 : glibc (RHSA-2026:95618)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95618 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

RHEL 9 : thunderbird (RHSA-2026:95597)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:95597 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libexpat: denial of service via crafted XML input...

EulerOS 2.0 SP12 : rsyslog (EulerOS-SA-2026-4452)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

ManageEngine PAM360 < Build 8601 RCE (CVE-2026-18199)

According to its self-reported build number, the ManageEngine PAM360 application running on the remote host is prior to build 8601. It is, therefore, affected by an authenticated remote code execution vulnerability due to improper validation and escaping of special characters on the server side. ...

RHEL 9 : webkit2gtk3 (RHSA-2026:95520)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95520 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in...

AlmaLinux 9.2 [TuxCare] Security Update: libpcap / libpcap-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793973276)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793973276 advisory. - libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150628 advisory. Unity Link Advisory UTSA-2026-150628 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

RHEL 9 : webkit2gtk3 (RHSA-2026:95516)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95516 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in...