Oracle Linux 9 : cjose (ELSA-2026-90812)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90812 advisory. 0.6.1-17.1 - CVE-2026-53938 cjose: heap buffer overflow in AES key unwrap Resolves: RHEL-256972 Tenable has extracted the preceding description block directly...

Linux Distros Unpatched Vulnerability : CVE-2026-117921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159...

Linux Distros Unpatched Vulnerability : CVE-2026-99165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: revalidate output stream after association connect wait When message interleaving is enabled, the first send waits for association establishment before...

Linux Distros Unpatched Vulnerability : CVE-2026-118014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118014 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2026-117916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-117916 No...

Linux Distros Unpatched Vulnerability : CVE-2026-117555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the loadbmp function of CImg.h caused by an integer overflow in the row byte count...

Linux Distros Unpatched Vulnerability : CVE-2026-118309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside th...

Fedora 44 : brotli / perl-Alien-Brotli (2026-92436bef9c)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-92436bef9c advisory. Brotli 1.2.1 update which is security fix for CVE-2026-111497 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Linux Distros Unpatched Vulnerability : CVE-2026-118358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2026-118332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-118338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-117603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows malicious NWC clients to exceed dailylimitsa...

Linux Distros Unpatched Vulnerability : CVE-2026-116576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services in lib/processes.js inserts a caller-supplied service name into...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146610)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146610 advisory. In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in slsync slipdevs stores bare netdevice pointers and takes no referenc...

AlmaLinux 8 : webkit2gtk3 (ALSA-2026:91636)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:91636 advisory. chromium-browser: angle: Use after free in ANGLE CVE-2026-95325 chromium-browser: angle: Out of bounds write in ANGLE CVE-2026-95331 chromium-browser:...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146821 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels ovsctgetconnlabels adds the labels...

Fedora 44 : mingw-freetype (2026-ce03acf998)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ce03acf998 advisory. Backport fix for CVE-2026-95512. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146826 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path The SMBus block transfer length...

Linux Distros Unpatched Vulnerability : CVE-2026-118017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118017 Note that Nessus relies on the presence of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146613)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146613 advisory. In the Linux kernel, the following vulnerability has been resolved: orangefs: skip leading spaces before parsing client debug masks orangefspreparecdmarray sizes eac...

Unity Linux 20.1050a / 20.1070a Security Update: kernel (UTSA-2026-146246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146246 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: clear control chunk transport if it is being removed sctpmakeheartbeatack caches the...

Linux Distros Unpatched Vulnerability : CVE-2026-117950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-117943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Rocky Linux 10.2 [CIQ] Security Update: libreswan / libreswan-debugsource / libreswan-minimal / etc Multiple Vulnerabilities (crlsa-2026_89923)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689923 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: Denial of Service via sending bogus X.509 certificates...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146635 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virtiovsockremove stops the virtqueues and then...

Linux Distros Unpatched Vulnerability : CVE-2026-99194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: aeroflex: move setting of netops to fix crash grethofprobe calls grethmdioini...

Linux Distros Unpatched Vulnerability : CVE-2026-99141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix crash in printgraphfunctionevent tracingsettracer assigns the flags of the newly selected tracer with: tr-currenttraceflags = t-flags ? :...

Linux Distros Unpatched Vulnerability : CVE-2026-57203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146827)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146827 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in cleandemultiplexinfo cleandemultiplexinfo cancels server-ec...

Linux Distros Unpatched Vulnerability : CVE-2026-99202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libsas: Fix SMP IO deadlock during HA resume smpexecutetasksg calls pmruntimegetsync on the host before issuing an SMP command. When that command is itsel...

Linux Distros Unpatched Vulnerability : CVE-2026-118180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it. A malicious or...

Linux Distros Unpatched Vulnerability : CVE-2026-117884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-117911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/insn-eval: Fix shadowed segment index in getsegregoverrideidx Commit 45e1dccc0653 x86/insn: Simplify foreachinsnprefix made foreachinsnprefix declare its ow...

Linux Distros Unpatched Vulnerability : CVE-2026-117610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2 in lib/xmlparse.c that mishandles the XMLTOKNONE token...

Linux Distros Unpatched Vulnerability : CVE-2026-116804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify from 3.4.4 before 3.4.17 contains a SAFEFORTEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using...

Oracle Linux 10 : libXi (ELSA-2026-91004)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91004 advisory. 1.8.1-7.1 - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270054 Tenable has extracted the preceding description block directly fr...

Linux Distros Unpatched Vulnerability : CVE-2026-118015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118015 Note that Nessus relies on th...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146813 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srptallocrwctxs unwind counters When srptallocrwctxs fails partway through a...

Linux Distros Unpatched Vulnerability : CVE-2026-99170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e...

Linux Distros Unpatched Vulnerability : CVE-2026-117984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,...

MiracleLinux 8 : libreswan-4.12-2.el8_10.7 (AXSA:2026-2190:04)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2190:04 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

Linux Distros Unpatched Vulnerability : CVE-2026-117927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-116273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The maxparts option defaulted to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146903 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtrendpointpost qrtrendpointpost validates an incoming...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146690 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: validate symlink target length in NFSv4 CREATE nfsd4decodecreate accepts an unbounded...

Linux Distros Unpatched Vulnerability : CVE-2026-117987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. CVE-2026-11798...

Linux Distros Unpatched Vulnerability : CVE-2026-99192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bcmgenet: unshare the skb before writing the control block bcmgenet stores firstcb, lastcb and bytessent in the skb control block and reads them back on...

Linux Distros Unpatched Vulnerability : CVE-2026-117899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-99125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttle...