EulerOS Virtualization 2.12.0 : nfs-utils (EulerOS-SA-2026-3654)

According to the versions of the nfs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client t...

EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2026-3738)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...

EulerOS Virtualization 2.12.1 : python-pyasn1 (EulerOS-SA-2026-3613)

According to the versions of the python-pyasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

EulerOS Virtualization 2.12.1 : perl-Socket (EulerOS-SA-2026-3608)

According to the versions of the perl-Socket package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read.In Socket.xs, packipmreqsource checks the length of its...

EulerOS Virtualization 2.11.0 : python-idna (EulerOS-SA-2026-3546)

According to the versions of the python-idna package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in...

EulerOS Virtualization 2.11.0 : ncurses (EulerOS-SA-2026-3529)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the...

EulerOS 2.0 SP10 : jbig2dec (EulerOS-SA-2026-3743)

According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...

EulerOS Virtualization 2.11.1 : aide (EulerOS-SA-2026-3398)

According to the versions of the aide package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability...

SUSE SLES15: libnetcdf-gnu-hpc / libnetcdf-gnu-mpich-hpc / etc (SUSE-SU-2026:4249-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:4249-1 advisory. This update for netcdf fixes the following issue: - CVE-2026-86095: out-of-bounds write in NC4HDF5inqattname due to missing length validation when...

EulerOS Virtualization 2.12.0 : perl (EulerOS-SA-2026-3657)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read.In Socket.xs, packipmreqsource checks the length of its source...

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2026-3715)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when giv...

EulerOS Virtualization 2.11.1 : libssh2 (EulerOS-SA-2026-3434)

According to the versions of the libssh2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the...

Linux Distros Unpatched Vulnerability : CVE-2026-92596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in the addressparser component that allows remote attackers to cause denial of servic...

EulerOS Virtualization 2.11.1 : emacs (EulerOS-SA-2026-3412)

According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary...

EulerOS Virtualization 2.12.0 : libsolv (EulerOS-SA-2026-3647)

According to the versions of the libsolv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file...

MongoDB 7.0.x < 7.0.43 / 8.0.x < 8.0.32 / 8.3.x < 8.3.11 Memory Corruption

The version of MongoDB installed on the remote host is 7.0.x prior to 7.0.43, 8.0.x prior to 8.0.32, or 8.3.x prior to 8.3.11. It is, therefore, affected by a memory corruption vulnerability: - A race condition in the document value layer of MongoDB Server can allow concurrent server threads to...

JFrog Artifactory 7.161.x < 7.161.16 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.161.x prior to 7.161.16. It is, therefore, affected by the following vulnerabilities. - An authentication weakness that, under default configuration, may allow an unauthenticated...

n8n Node.js Package 2.0.x < 2.37.7 / 2.38.x < 2.38.2 Persistent Storage Exhaustion (CVE-2026-86075)

The version of the n8n Node.js Package installed on the remote host is 2.0.x prior to 2.37.7, or is 2.38.x prior to 2.38.2. It is, therefore, affected by a denial of service vulnerability: - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client...

FreeBSD : Vinyl/Varnish -- VCL string methods workspace overflow (a2fda5d7-b2fb-11f1-9800-641c67a117d8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a2fda5d7-b2fb-11f1-9800-641c67a117d8 advisory. Vinyl Development Team reports: A workspace buffer overflow vulnerability was found in the .upper and...

Fedora 44 : stb (2026-2a592f622a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2a592f622a advisory. Patch stbsprintf: security fix for CVE-2026-79516 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-93314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing ...

Linux Distros Unpatched Vulnerability : CVE-2026-91147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-ws. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a specially crafted...

Fedora 44 : nodejs-undici (2026-90bb0fcd50)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-90bb0fcd50 advisory. Update to version 7.29.0. Contains fix for CVE-2026-18149. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-110880)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110880 advisory. A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper...

Linux Distros Unpatched Vulnerability : CVE-2026-92510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in ibdestroysrquser When accessing a SRQ via the netlink path the only synchronization mechanism for the said SRQ is...

Linux Distros Unpatched Vulnerability : CVE-2026-92512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix use after free in ibqueryqp When querying a QP via the netlink flow the only synchronization mechanism for the said QP is rdmarestrackget,...

Linux Distros Unpatched Vulnerability : CVE-2026-90266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge On a zoned FS,...

Linux Distros Unpatched Vulnerability : CVE-2026-90268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix error handling in sdprobe after large pool creation failure After...

Linux Distros Unpatched Vulnerability : CVE-2026-90393

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix potential UAF in bpfnetnslinkupdateprog In bpfnetnslinkupdateprog, the checks for oldprog and prog type are currently performed locklessly before...

Oracle Linux 9 : tomcat (ELSA-2026-68660)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68660 advisory. - Resolves: RHEL-192825 HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-192659 Improper Input Validation vulnerability due to...

Linux Distros Unpatched Vulnerability : CVE-2026-90403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtlwifi: pci: fix error path in rtlpciprobe In the last error path in rtlpciprobe, the cleanup functions are skipped due to a wrong goto label. Moreover,...

Linux Distros Unpatched Vulnerability : CVE-2026-90416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix stack out-of-bounds read in ccparams debugfs getparam reads a congestion parameter as a u32 but formats it with the signed %d into an 11-byte sta...

Linux Distros Unpatched Vulnerability : CVE-2026-92506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Fix requested device removal race scmiprotocoldeviceunrequest drops scmirequesteddevicesmtx while notifying listeners but continues to retain...

Linux Distros Unpatched Vulnerability : CVE-2026-90197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: haptic: don't write an uninitialized value to unhandled usages filleffectbuf initializes value only for the four haptic usages handled by its switch, but...

Linux Distros Unpatched Vulnerability : CVE-2026-90430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized tegra241vintfinitlvcmdq stores the freshly allocated vcmdq pointer to the vintf-lvcmd...

Linux Distros Unpatched Vulnerability : CVE-2026-92496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: Avoid buffer overread in ath11kwmitlvoprx Currently, in ath11kwmitlvoprx, the firmware buffer is read without first verifying that the buffer has...

Linux Distros Unpatched Vulnerability : CVE-2026-92514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/erdma: Fix CEQ tasklet use-after-free on removal Each CEQ interrupt handler only schedules eqc-tasklet. The tasklet calls erdmaceqcompletionhandler, which...

Linux Distros Unpatched Vulnerability : CVE-2026-90418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix BUG in nilfscopydirtypages on dirty state mismatch Syzbot reported a kernel BUG triggered within nilfscopydirtypages, which copies dirty DAT file...

Linux Distros Unpatched Vulnerability : CVE-2026-90169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: free preauth sessions on connection teardown SMB3.1.1 multichannel binding preserves the preauthentication hash in a preauthsession between the NTLM...

Linux Distros Unpatched Vulnerability : CVE-2026-90385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1: create serial pool adding rdev to array with serializepolicy=1 The following bug has been observed with kernel 7.1.3 after adding a new rdev to an...

Linux Distros Unpatched Vulnerability : CVE-2026-90433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: oc-tiny: switch to managed controller allocation The controller is allocated with the non-managed spiallochost while the interrupt is registered with...

Linux Distros Unpatched Vulnerability : CVE-2026-90391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/testhmm: fail dmirrorfault when the mirrored mm is gone dmirrorfault is called from the dmirrorread and dmirrorwrite retry loops after dmirrordoread or...

Linux Distros Unpatched Vulnerability : CVE-2026-90412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix return status of RMI log page on allocation failure nvmetexecutegetlogpagermi leaves 'status' holding NVMESCSUCCESS set by the successful...

Linux Distros Unpatched Vulnerability : CVE-2026-92501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: drain in-flight DIO before buffered write fallback generic/746 started failing intermittently on ext3 no-extent inodes. The test triggers 'Page cache...

Linux Distros Unpatched Vulnerability : CVE-2026-90307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/srp: fix heap information leak on a truncated SRPCREDREQ srprecvdone passes wc-bytelen to srpprocessrsp. It passes nothing to srpprocesscredreq and...

Linux Distros Unpatched Vulnerability : CVE-2026-92489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: Fix skb double-free in xfrmdevdirectoutput A return value other than 1 from localout means that the skb has been consumed or its ownership was transferred...

Linux Distros Unpatched Vulnerability : CVE-2026-90382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length The MPDU length in the rx descriptor comes from the hardware. In monitor mode with the fcsfail...

Linux Distros Unpatched Vulnerability : CVE-2026-90386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equal...

Linux Distros Unpatched Vulnerability : CVE-2026-90426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs tegra241cmdqvremove tears each VINTF down first, then calls freeirq. Tearing a VINTF down...

Linux Distros Unpatched Vulnerability : CVE-2026-92490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Unrequest devices if driver registration fails scmidriverregister requests protocol devices before registering the driver. If driverregister...