CentOS Linux 8.4 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc (CENTOS8.4:CLSA-2026:1793289444)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793289444 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE...

Amazon Linux 2023 : nvidia-xconfig (ALAS2023NVIDIA-2026-323)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-323 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1793292073)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793292073 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be update...

Linux Distros Unpatched Vulnerability : CVE-2026-18204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Rocky Linux 9.2 [CIQ] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs (ciqsa-2026_1731)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261731 advisory. This advisory aggregates security fixes for the unbound SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-44690. Tenable has extracted the preceding description...

CentOS Linux 7 [TuxCare] Security Update: libvirt / libvirt-admin / libvirt-bash-completion / libvirt-client / etc (CENTOS7:CLSA-2026:1793036677)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793036677 advisory. - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. Th...

RockyLinux 10 : yggdrasil (RLSA-2026:91138)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:91138 advisory. net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing CVE-2026-94440 net/http:...

RHEL 8 : curl (RHSA-2026:92368)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92368 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including...

Alibaba Cloud Linux 3 : 0322: gawk (ALINUX3-SA-2026:0322)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0322 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-40467: Use After Free vulnerabili...

RHEL 8 : kernel (RHSA-2026:91493)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:91493 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: use a stable FDB...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147005)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147005 advisory. A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily...

Linux Distros Unpatched Vulnerability : CVE-2026-114230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they claim to be SASL frames. This allows authentication bypass...

RHEL 8 : librsvg2 (RHSA-2026:92336)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92336 advisory. The librsvg2 packages provide a Scalable Vector Graphics SVG library based on the libart library. Security Fixes: librsvg: Use-after-free when XML...

Linux Distros Unpatched Vulnerability : CVE-2026-115642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted applicati...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: perl-DBI (UTSA-2026-147007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147007 advisory. DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-146995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146995 advisory. A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another...

RHEL 9 : brotli (RHSA-2026:90888)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90888 advisory. Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffm...

Linux Distros Unpatched Vulnerability : CVE-2026-118589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/vtk42.py of the component VTK Reader. Executing...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147008)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147008 advisory. A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are...

RHEL 9 : brotli (RHSA-2026:90914)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90914 advisory. Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffm...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147018)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147018 advisory. A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or...

CentOS Linux 6 [TuxCare] Security Update: libpng / libpng-devel / libpng-static Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792994241)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792994241 advisory. - The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: OpenEXR (UTSA-2026-146992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146992 advisory. OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0...

Linux Distros Unpatched Vulnerability : CVE-2026-97889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Oracle Linux 9 : libXrender (ELSA-2026-91057)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91057 advisory. 0.9.10-16.2 - CVE-2026-88807 libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats in RenderQueryPictFormats Resolves:...

RockyLinux 8 : java-17-openjdk security update for Rocky Linux 8 (Important) (RLSA-2026:88352)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:88352 advisory. JDK: Enhance PKCS5 padding CVE-2026-83374 JDK: Enhance TLS certificate handling CVE-2026-83376 JDK: Enhance LDAP logins CVE-2026-83380 JDK: Enhance SASL...

RHEL 8 : brotli (RHSA-2026:90892)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90892 advisory. Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffm...

RHEL 9 : skopeo (RHSA-2026:90462)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90462 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...

RHEL 10 : yggdrasil (RHSA-2026:91138)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:91138 advisory. yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate chil...

Rocky Linux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793267498)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793267498 advisory. - Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Librar...

Rocky Linux 9.6 [TuxCare] Security Update: bzip2 / bzip2-devel / bzip2-libs / bzip2-static (ALMALINUX9.6:CLSA-2026:1793283021)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793283021 advisory. - bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1793292073)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793292073 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated...

RHEL 9 : podman (RHSA-2026:90362)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90362 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

RHEL 9 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:92056)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92056 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release ...

CentOS Linux 7 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-devel / etc (CENTOS7:CLSA-2026:1793021177)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793021177 advisory. - NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpslicemodule module. When the slice directive and unnamed regex captures are...

RHEL 8 : brotli (RHSA-2026:90893)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90893 advisory. Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffm...

AlmaLinux 9.2 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.2:CLSA-2026:1793278957)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793278957 advisory. - A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by strippi...

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-3342)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3342 advisory. Fix GHSA-66mr-7wc7-23vc: FreeRDP client can abort while logging a malformed RDPDR device announcement Fix GHSA-x7w3-32ch-x2jq: winpr image conversion: heap over-read encoding 16 bpp DIBs to PN...

Rocky Linux 9.6 [CIQ] Security Update: brotli / brotli-devel / libbrotli / python3-brotli (ciqsa-2026_1728)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261728 advisory. This advisory aggregates security fixes for the brotli SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-111497. Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-118263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's BodyDump middleware can discard a BodyLimit overflow error for an unknown-length request when...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libsoup (UTSA-2026-147030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147030 advisory. A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs...

Amazon Linux 2023 : libnvidia-cfg, libnvidia-fbc, libnvidia-gpucomp (ALAS2023NVIDIA-2026-326)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-326 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nginx (UTSA-2026-146980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146980 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain configurations, processin...

AlmaLinux 9.6 [TuxCare] Security Update: bzip2 / bzip2-devel / bzip2-libs / bzip2-static (ALMALINUX9.6:CLSA-2026:1793283021)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793283021 advisory. - bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an...

MiracleLinux 8 : container-tools:rhel8 (AXSA:2026-2206:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2206:01 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/x509: golang: crypto/x509: Man-in-the-middle attack...

Rocky Linux 9.6 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793285499)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793285499 advisory. - Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147017)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147017 advisory. A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel XkbNumKbdGroups but...

RHCOS 4 : OpenShift Container Platform 4.21.40 (RHSA-2026:89229)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:89229 advisory. - crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates CVE-2026-111943 Note that Nessus has n...

Cisco Nexus 3000 9000 Series Switches MPLS OAM RCE (cisco-sa-moam-rce-uBTzYV7)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the MPLS Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an...

Amazon Linux 2023 : nvidia-fabric-manager-devel, nvidia-fabricmanager (ALAS2023NVIDIA-2026-319)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2026-319 advisory. NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this...