Elasticsearch 8.x < 8.19.20 / 9.0.x < 9.4.5 Multiple Vulnerabilities (ESA-2026-76 / ESA-2026-77 / ESA-2026-118 / ESA-2026-119 / ESA-2026-133)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.20, or 9.0.x prior to 9.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-76, ESA-2026-77, ESA-2026-118, ESA-2026-119, and ESA-2026-133 advisories. - Uncontrolled Recursion CWE-6...

GLSA-202608-19 : quickjs-ng: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-19 quickjs-ng: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in quickjs-ng. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX696939)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-63.21, or 14.1 prior to 14.1-73.32, or 13.1-FIPS/NDcPP prior to 13.1-37.277, or 14.1-FIPS prior to 14.1-73.32. It is, therefore, affected by multiple vulnerabilities: -...

RHEL 10 : kernel (RHSA-2026:57251)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57251 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: Fix out-of-bound...

AlmaLinux 8 : kernel-rt (ALSA-2026:57254)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:57254 advisory. kernel: net: ieee802154: do not leave a dangling sk pointer in ieee802154create CVE-2024-56602 kernel: ip6gre: Use cached t-net in ip6erspanchangelink...

RHEL 8 : kernel-rt (RHSA-2026:57254)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57254 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Oracle Linux 9 : ansible-core (ELSA-2026-57149)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57149 advisory. 1:2.14.18-3.1 - Fix CVE-2026-11332 prevent arbitrary git configuration via role requirements RHEL-194134 Tenable has extracted the preceding description block...

RockyLinux 10 : php8.4 (RLSA-2026:56969)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56969 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Arbitrary code execution via out-of-bounds write in bccomp...

RockyLinux 9 : ansible-core (RLSA-2026:57149)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:57149 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding description...

AlmaLinux 9 : ansible-core (ALSA-2026:57149)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:57149 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding description...

RockyLinux 10 : ansible-core (RLSA-2026:57148)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:57148 advisory. ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution CVE-2026-11332 Tenable has extracted the preceding description...

RHEL 9 : php:8.3 (RHSA-2026:57539)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57539 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: ext-pgsql: PHP: SQL injection vi...

RHEL 8 : php:8.2 (RHSA-2026:57574)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57574 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: ext-pgsql: PHP: SQL injection vi...

Oracle Linux 10 : yggdrasil (ELSA-2026-57126)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57126 advisory. 0.4.9.2-2 - Rebuild yggdrasil against updated golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Linux Distros Unpatched Vulnerability : CVE-2026-64713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS...

Linux Distros Unpatched Vulnerability : CVE-2026-73639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libimager-perl - None Ubuntu Linux - Unknown description CVE-2026-73639 Note that Nessus relies on the presence of the package as reported by the...

RockyLinux 9 : php:8.3 (RLSA-2026:57539)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:57539 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archiv...

RHEL 8 : kernel (RHSA-2026:57253)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57253 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: ieee802154: do not leave...

Linux Distros Unpatched Vulnerability : CVE-2026-71084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is 26.7.0. Easily exploitable...

GLSA-202608-18 : GNU Emacs: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202608-18 GNU Emacs: Arbitrary code execution A vulnerability has been discovered in GNU Emacs. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the...

RockyLinux 10 : glib2 (RLSA-2026:57015)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:57015 advisory. glib: buffer over-read in glib/gvariant-serialiser.c via gvstupleisnormal CVE-2026-58010 glib: out-of-bounds read in glib/gdatetime.c:gdatetimegetymd v...

Linux Distros Unpatched Vulnerability : CVE-2026-76888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76888 Note that Nessus relies on the presence of the packag...

Google Chrome < 151.0.7922.173 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 151.0.7922.173. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0404570826 advisory. - Use after free in DOM in Google Chrome prior to 151.0.7922.173...

Splunk Enterprise 9.4.0 < 9.4.14, 10.0.0 < 10.0.9, 10.2.0 < 10.2.6, 10.4.0 < 10.4.2 (SVD-2026-0801)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0801 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Linux Distros Unpatched Vulnerability : CVE-2026-73638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libimager-perl - None Ubuntu Linux - Unknown description CVE-2026-73638 Note that Nessus relies on the presence of the package as reported by the...

RHEL 8 : python-urwid (RHSA-2026:57638)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57638 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Linux Distros Unpatched Vulnerability : CVE-2026-71137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

Oracle Linux 8 / 9 : java-1.8.0-openjdk (ELSA-2026-55775)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55775 advisory. 1.8.0.504.b01-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.504.b01-1.1 - Update to 8u504-b01 GA. - Update release notes for...

Linux Distros Unpatched Vulnerability : CVE-2026-76881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76881 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2026-76926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76926 Note that Nessus relies on the presence of the...

Mattermost Server 10.11.x < 10.11.22 / 11.7.x < 11.7.7 Multiple Vulnerabilities (MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities as referenced in the MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704 advisories. - Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 fail to prevent guest users from receiving Board Admin...

Linux Distros Unpatched Vulnerability : CVE-2026-71128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

Fedora 43 : ntpsec (2026-11d8a5a213)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-11d8a5a213 advisory. Update to the latest upstream release, which has a security fix for CVE-2026-18321, and other bug fixes and improvements. Tenable has extracted the preceding...

RHEL 9 : dracut (RHSA-2026:57775)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57775 advisory. The dracut packages contain an event-driven initial RAM file system initramfs generator infrastructure based on the udev device manager. Th...

Fedora 44 : ntpsec (2026-80887c367d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-80887c367d advisory. Update to the latest upstream release, which has a security fix for CVE-2026-18321, and other bug fixes and improvements. Tenable has extracted the preceding...

RockyLinux 10 : mysql8.4 (RLSA-2026:56007)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56007 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-47064...

Elasticsearch 8.19.x < 8.19.20 / 9.4.x < 9.4.5 / 9.5.x < 9.5.1 Multiple Vulnerabilities (ESA-2026-80 / ESA-2026-123)

The version of Elasticsearch installed on the remote host is 8.19.x prior to 8.19.20, or 9.4.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-80 and ESA-2026-123 advisories. - The native inference process that...

RHEL 8 : python-urwid (RHSA-2026:57637)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57637 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Linux Distros Unpatched Vulnerability : CVE-2026-71132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Difficult to explo...

Linux Distros Unpatched Vulnerability : CVE-2026-76217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply...

Linux Distros Unpatched Vulnerability : CVE-2026-76891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76891 Note that Nessus relies on the presence of the package as reported...

Linux Distros Unpatched Vulnerability : CVE-2026-54330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway R...

RHEL 7 : yelp (RHSA-2026:57417)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:57417 advisory. Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, includin...

Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory. - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76929 - C12.22...

RHEL 9 : mrtg (RHSA-2026:57600)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57600 advisory. The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provid...

Grafana Labs 11.2.0 <= 11.6.16 / 12.2.0 <= 12.2.10 / 12.3.0 <= 12.3.8 / 12.4.0 <= 12.4.5 / 13.0.0 <= 13.0.3 / 13.1.0 < 13.1.1 Information Disclosure (CVE-2026-11817)

The version of Grafana Labs installed on the remote host is 11.2.x through 11.6.x prior or equal to 11.6.16, 12.2.x prior or equal to 12.2.10, 12.3.x prior or equal to 12.3.8, 12.4.x prior or equal to 12.4.5, 13.0.x prior or equal to 13.0.3, or 13.1.0. It is, therefore, affected by an information...

Linux Distros Unpatched Vulnerability : CVE-2026-63652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsndserverrecvformats in channels/rdpsnd/server/rdpsndmain.c frees...

Linux Distros Unpatched Vulnerability : CVE-2026-76879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76879 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-71126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Difficult to explo...

Fedora 46 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-ce471fc0d3)

The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ce471fc0d3 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...