Python Library Django 5.2.13 < 5.2.19 / 6.0.4 < 6.0.10 / 6.1.x < 6.1.3 DoS

The detected version of the Django Python package is 5.2.x at or above 5.2.13 and prior to 5.2.19, or 6.0.x at or above 6.0.4 and prior to 6.0.10, or 6.1.x prior to 6.1.3. It is, therefore, affected by a denial of service vulnerability as referenced by the security release advisory: -...

EulerOS 2.0 SP12 : rpm (EulerOS-SA-2026-4528)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.c...

SUSE SLES12 Security Update : kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:5086-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5086-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: -...

RHEL 6 : bind (RHSA-2026:95727)

"The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95727 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

Linux Distros Unpatched Vulnerability : CVE-2026-49272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require...

RHEL 9 : qt5-qtbase (RHSA-2026:95574)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95574 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

Linux Distros Unpatched Vulnerability : CVE-2026-73472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer gst-plugins-good avidemux. In the superindex and subindex parsers, integer overflow can bypass bounds checks and cause out-of-boun...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2026-4405)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails t...

RHEL 8 : webkit2gtk3 (RHSA-2026:95590)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95590 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in...

EulerOS 2.0 SP12 : util-linux (EulerOS-SA-2026-4461)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount....

EulerOS 2.0 SP12 : pcre2 (EulerOS-SA-2026-4512)

According to the versions of the pcre2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject.CVE-2026-89160 PCRE2 befo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150631 advisory. Unity Link Advisory UTSA-2026-150631 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

AlmaLinux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794007406)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794007406 advisory. - libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2 in lib/xmlparse.c that...

Fedora 43 : tor (2026-d62d139e4b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d62d139e4b advisory. Update to latest upstream release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

EulerOS 2.0 SP12 : perl-URI (EulerOS-SA-2026-4439)

According to the versions of the perl-URI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep...

SUSE SLES12 Security Update : kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:5052-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5052-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: -...

Elastic Beats packetbeat 8.0.x < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 DoS (ESA-2026-208)

The version of Elastic Beats packetbeat installed on the remote host is 8.0.x prior to 8.19.24, 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by a denial of service vulnerability. - NULL Pointer Dereference CWE-476 in the AMQP protocol parser in Packetbeat can lead to ...

EulerOS 2.0 SP12 : python-filelock (EulerOS-SA-2026-4443)

"According to the versions of the python-filelock package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check- Time-of-Use TOCTOU race condition...

MiracleLinux 9 : thunderbird-153.5.0-1.el9_8.ML.1 (AXSA:2026-2271:26)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2271:26 advisory. libexpat: denial of service via crafted XML input CVE-2026-45186 firefox: Mitigation bypass in the Enterprise Policies component CVE-2026-109764...

RHEL 8 : bind (RHSA-2026:95435)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95435 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

EulerOS 2.0 SP12 : apr-util (EulerOS-SA-2026-4467)

According to the versions of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons,...

EulerOS 2.0 SP12 : pam (EulerOS-SA-2026-4433)

According to the versions of the pam packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in...

AlmaLinux 9.2 [TuxCare] Security Update: nspr / nspr-devel / nss / nss-devel / nss-pkcs11-devel / etc (ALMALINUX9.2:CLSA-2026:1794007919)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1794007919 advisory. - Calling PK11Encrypt in NSS using CKMCHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge...

Progress WS_FTP Server < 9.0.7 / 10.0.x < 10.0.4 Multiple Vulnerabilities

The version of Progress WSFTP Server installed on the remote Windows host is prior to 9.0.7 2024.0.7, or is 10.0.x prior to 10.0.4 2025.0.4. It is, therefore, affected by multiple vulnerabilities: - An OS command injection vulnerability in Progress Software WSFTP Server versions prior to 2024.0.7...

MiracleLinux 8 : kernel-4.18.0-553.181.1.el8_10 (AXSA:2026-2276:118)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2276:118 advisory. kernel: ipv6: exthdrs: refresh nh pointer after ipv6hopjumbo CVE-2026-63924 kernel: ipv6: exthdrs: refresh nh after handling HAO option...

EulerOS 2.0 SP12 : libxml2 (EulerOS-SA-2026-4500)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.CVE-2026-86140 In libxml2 before 2.15.4, there ...

CentOS Linux 8.4 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1793979905)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793979905 advisory. - SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITELIMITEXPRDEPTH limit by...

RockyLinux 9 : tesseract (RLSA-2026:95086)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95086 advisory. tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data CVE-2026-88048 tesseract: Tesseract: Stack buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-73471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer gst-plugins-good avidemux. In the Nikon metadata tag parser, a pointer can be dereferenced without verifying that data remains in...

EulerOS 2.0 SP12 : wget (EulerOS-SA-2026-4540)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-150626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-150626 advisory. Unity Link Advisory UTSA-2026-150626 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Fedora 43 : perl-MIME-tools (2026-a415b3bf48)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a415b3bf48 advisory. This is a cumulative bug-fix update, including multiple security fixes. Note that there is a change to some defaults: maxparts is now set to 1000 an...

EulerOS 2.0 SP12 : libusbx (EulerOS-SA-2026-4498)

According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...

Linux Distros Unpatched Vulnerability : CVE-2026-123199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in getattributes in src/common.c caused by an unbounded strcpy of an element's...

EulerOS 2.0 SP12 : busybox (EulerOS-SA-2026-4470)

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component...

Fedora 43 : python-mistune (2026-340793a2f1)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-340793a2f1 advisory. Update to 3.3.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

EulerOS 2.0 SP12 : environment-modules (EulerOS-SA-2026-4478)

According to the versions of the environment-modules packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in...

RHEL 9 : Satellite 6.18 (RHSA-2026:95657)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95657 advisory. This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address the vulnerabilities described...

RHEL 8 : ruby:2.5 (RHSA-2026:95514)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95514 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-4483)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated arra...

EulerOS 2.0 SP12 : environment-modules (EulerOS-SA-2026-4401)

According to the versions of the environment-modules packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in...

EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-4513)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan...

Linux Distros Unpatched Vulnerability : CVE-2026-112908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From version 3.30.0 until version 4.2.1, StrictSoftFileLock and AsyncStrictSoftFileLock on POSIX system...

EulerOS 2.0 SP12 : python-pillow (EulerOS-SA-2026-4446)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap r...

RHEL 8 : webkit2gtk3 (RHSA-2026:95403)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95403 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: skia:...

Rocky Linux 10.2 [CIQ] Security Update: tesseract / tesseract-debuginfo / tesseract-debugsource / etc Multiple Vulnerabilities (crlsa-2026_95085)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695085 advisory. tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data CVE-2026-88048 tesseract: Tesseract: Stack buffe...

EulerOS 2.0 SP12 : rsyslog (EulerOS-SA-2026-4529)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

RHEL 8 : kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_161_1 (RHSA-2026:95601)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95601 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

EulerOS 2.0 SP12 : perl-DBI (EulerOS-SA-2026-4437)

According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and...

RHEL 10 : dogtag-pki (RHSA-2026:95466)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95466 advisory. IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the...