RHEL 7 : kernel (RHSA-2026:41235)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41235 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: sched: actcsum: validate...

Oracle Linux 10 : go-fdo-client / and / go-fdo-server (ELSA-2026-22141)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22141 advisory. - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 - Rebuild to fix CVE-2026-32283 go-fdo-server - Rebuild to fix CVE-2026-32282 and CVE-2025-68121...

Photon OS 4.0: Docker PHSA-2026-4.0-1057

An update of the docker package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1057. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 43 : perl-DBI (2026-71d7e4d1da)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-71d7e4d1da advisory. 1.650 bump - Fix CVE-2026-14739, CVE-2026-14740 and CVE-2026-14380 Tenable has extracted the preceding description block directly from the Fedora...

Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2026-35832)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-35832 advisory. - rebuilt with golang-1.26.4-1.el102 to fix CVE-2026-33811, CVE-2026-27145 - rebuilt with golang-1.26.3-4.el102 to fix CVE-2026-32281 Tenable has...

Oracle Linux 10 : grafana-pcp (ELSA-2026-35826)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-35826 advisory. - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-183688: CVE-2026-39821 - Resolves RHEL-166460: CVE-2026-32282 Tenable has extracted the preceding...

Rockwell Studio 5000 Logix Designer Unquoted Search Path (SD1783)

The version of Rockwell Studio 5000 Logix Designer installed on the remote Windows host is affected by a code execution vulnerability. An unquoted search path in the External Tools configuration means that executable paths containing spaces are not properly quoted, so the operating system may...

Oracle Linux 10 : python3.14-pip (ELSA-2026-36193)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36193 advisory. 25.2-5 - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pipinstallupgrade to run pip-3.14 - fix bash completion +...

RockyLinux 9 : hplip (RLSA-2026:40831)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:40831 advisory. HPLIP: Incomplete Fix for CVE-2026-8631 CVE-2026-14544 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

SUSE SLES16 Security Update : pam (SUSE-SU-2026:22639-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22639-1 advisory. This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pamuserdb module's plaintext-password comparison...

Oracle Linux 10 : grafana (ELSA-2026-35827)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35827 advisory. - Resolves: RHEL-183694: CVE-2026-39821 - Resolves RHEL-161791: CVE-2026-27877 - Resolves RHEL-166459: CVE-2026-32282 Tenable has extracted the preceding...

Fedora 43 : firefox (2026-365cce949c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-365cce949c advisory. - New upstream release 152.0.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

RHEL 10 / 8 / 9 : Red Hat JBoss Web Server 7.0.0 security (Important) (RHSA-2026:39188)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39188 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised ...

RockyLinux 8 : hplip (RLSA-2026:40894)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:40894 advisory. HPLIP: Incomplete Fix for CVE-2026-8631 CVE-2026-14544 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

Ubuntu 16.04 LTS : Ruby vulnerabilities (USN-8556-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8556-1 advisory. It was discovered that the Net::IMAP client in Ruby did not properly sanitize Symbol arguments passed to IMAP commands. A remote attacker controlling a...

Oracle Linux 10 : thunderbird (ELSA-2026-30846)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-30846 advisory. 140.12.0-1.0.1 - Add Oracle prefs 140.12.0-1 - Update to 140.12.0 ESR 140.11.0-1 - Update to 140.11.0 ESR 140.10.1-1 - Update to 140.10.1 ESR Tenable...

Oracle Linux 10 : .NET / 10.0 (ELSA-2026-25115)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25115 advisory. 10.0.109-1.0.1 - Add support for Oracle Linux 10.0.109-1 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 10.0.108-1 - Update...

RabbitMQ 3.13.x < 3.13.15 / 4.0.x < 4.0.21 / 4.1.x < 4.1.11 / 4.2.x < 4.2.6 Topic Authorization Bypass

The version of RabbitMQ installed on the remote host is affected by an authorization bypass vulnerability: - RabbitMQ topic authorization can allow restricted topic writes and binds during metadata-store failures because topic-permission lookup errors from Khepri can collapse to undefined, which...

Oracle Linux 10 : python-urllib3 (ELSA-2026-28000)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-28000 advisory. - Security fix for CVE-2026-44431 - Security fix for CVE-2026-44432 Resolves: RHEL-184817, RHEL-185121 - Security fix for CVE-2025-66471 - Security f...

Security Updates for Microsoft SharePoint Server 2019 (July 2026)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. CVE-2026-505...

Security Updates for Microsoft SharePoint Server Subscription Edition (July 2026)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a...

Oracle Linux 10 : libsolv (ELSA-2026-28236)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-28236 advisory. - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178270 - Cope with integer overflow in data size arithmetics in repoaddsolv...

Oracle Linux 10 : libyang (ELSA-2026-24758)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-24758 advisory. 2.1.148-4 - DoS or arbitrary code execution via maliciously crafted LYB binary blob - Resolves: RHEL-177026 - CVE-2026-44673 Tenable has extracted the precedi...

Oracle Linux 10 : opencryptoki (ELSA-2026-28231)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28231 advisory. 3.26.0-3.1 - Resolves: RHEL-171556, Fix possible out-of-bounds access in BER decode functions 3.26.0-3 - Resolves: RHEL-169565, Fix syslog message printing...

Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-26566)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-26566 advisory. - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolve...

Oracle Linux 10 : qt6-qtdeclarative (ELSA-2026-20567)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-20567 advisory. 6.10.1-1.1 - VectorImage: sanitize source string used in output CVE-2025-14576 Resolves: RHEL-173494 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-57076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - YAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syckhdlraddanchor. In the bundled...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Ubuntu Advantage Tools (pro client) vulnerabilities (USN-8555-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8555-1 advisory. Bilal Teke discovered that Ubuntu Advantage Tools exposed the Pro bearer token in...

RabbitMQ 4.2.x < 4.2.4 MQTT Topic Authorization Bypass

The version of RabbitMQ installed on the remote host is 4.2.x prior to 4.2.4. It is, therefore, affected by an authorization bypass vulnerability: - RabbitMQ's MQTT plugin allows for topic-level authorization using regular expressions with variable substitution. However, the clientid is provided ...

RabbitMQ 4.2.x < 4.2.5 XSS via x-internal-purpose Argument

The version of RabbitMQ installed on the remote host is 4.2.x prior to 4.2.5. It is, therefore, affected by a cross-site scripting vulnerability: - The RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute without proper escaping on the Queu...

Oracle Linux 9 : maven:3.9 (ELSA-2026-38500)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38500 advisory. aopalliance 0:1.0-49 - Update javapackages test plan to f42 0:1.0-40 - Rebuilt for https://fedoraproject.org/wiki/Fedora41MassRebuild 0:1.0-39 - Rebuilt for...

Oracle Linux 10 : expat (ELSA-2026-22715)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22715 advisory. - expat: backport CVE-2026-45186 fix attribute collision check DoS - Fix behavior change caused by fix for CVE-2024-8176 Fri Mar 14 2025 Tomas Korbar - Fix...

SUSE SLED15 / SLES15 Security Update : libssh2_org (SUSE-SU-2026:3076-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3076-1 advisory. This update for libssh2org fixes the following issue - CVE-2026-55199: pre-Authentication DoS via SSHMSGEXTINFO Handler...

Oracle Linux 10 : libtiff (ELSA-2026-19150)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19150 advisory. 4.6.0-8.1 - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile RHEL-159310 Tenable has extracted the preceding description block directly...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : NTFS-3G vulnerabilities (USN-8554-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8554-1 advisory. It was discovered that NTFS-3G had a heap buffer overflow when reading certain NTFS images. A local attacker could possibly use...

Oracle Linux 10 : .NET / 10.0 (ELSA-2026-22145)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22145 advisory. 10.0.109-1.0.1 - Add support for Oracle Linux 10.0.109-1 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 10.0.108-1 - Update to .NET...

Linux Distros Unpatched Vulnerability : CVE-2026-57075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syckbase64dec. The base64 decoder in the bundled...

Oracle Linux 10 : giflib (ELSA-2026-33502)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33502 advisory. - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension RHEL-157086 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : perl-HTTP-Daemon (ELSA-2026-36189)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-36189 advisory. - Fix CVE-2026-8450: sendfile shell-magic via 2-arg open Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Linux Distros Unpatched Vulnerability : CVE-2026-47082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation fcc feature skips the destination-mailbox ACL. A user whose vacation Sieve...

SAP NetWeaver Enterprise Portal XSS (3746678)

The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a cross-site scripting vulnerability as referenced in SAP Security Note 3746678: - SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. T...

Rockwell Studio 5000 Logix Designer Incorrect Authorization RCE (SD1783)

The version of Rockwell Studio 5000 Logix Designer installed on the remote Windows host is affected by a remote code execution vulnerability. Due to incorrect authorization on a configuration file, any authenticated user can modify the paths of external tools configured within the application. An...

Photon OS 4.0: Mysql PHSA-2026-4.0-1058

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1058. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 10 : post (ELSA-2026-25930)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-25930 advisory. 2:3.8.5-10 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 Tenable has extracted the preceding descriptio...

RabbitMQ 3.13.x < 3.13.14 / 4.0.x < 4.0.19 / 4.1.x < 4.1.10 / 4.2.x < 4.2.5 Multiple Vulnerabilities

The version of RabbitMQ installed on the remote host is affected by multiple vulnerabilities: - The rabbitmqmanagement HTTP API accepts oversized valid JSON bodies on withdecode and directrequest paths because readcompletebody checks the accumulated size before the final chunk but not the final...

Cisco IP and Video Phone Multiple Vulnerabilities (cisco-sa-ipphone-multi-vulns-cXAhCvS)

According to its self-reported version, the remote Cisco IP or Video Phone running SIP Software is affected by multiple vulnerabilities: - A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause an affected device t...

Oracle Linux 10 : libsoup3 (ELSA-2026-19143)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19143 advisory. - Add patches for CVE-2026-4271 and CVE-2026-5119 - Add patch for CVE-2026-1761 - Fix CVE-2026-0719 - Fix CVE-2025-14523 - Add patch for CVE-2025-121...

SUSE SLES12 Security Update : rpcbind (SUSE-SU-2026:3078-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3078-1 advisory. This update for rpcbind fixes the following issue - Fix several memory leaks and buffer overflow bsc1267212. Tenable has extracted the preceding...

Fedora 43 : rust-cargo-rpmstatus (2026-6d5a7be3b9)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d5a7be3b9 advisory. Update to 0.2.5 with dependency updates only, and further update some dependencies. Particularly, quick- xml 0.41 fixes RUSTSEC-2026-0194 and...

SUSE SLES15 Security Update : python-urllib3 (SUSE-SU-2026:2854-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2854-2 advisory. This update for python-urllib3 fixes the following issue - Regression introduced by CVE-2025-66471 fix during file download with pySSL...