Linux Distros Unpatched Vulnerability : CVE-2026-117984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159,...

MiracleLinux 9 : xz-5.2.5-8.el9_8.1 (AXSA:2026-2179:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2179:01 advisory. xz: XZ Utils: Denial of Service via buffer overflow in index decoding CVE-2026-34743 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-117922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-117931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbir...

AlmaLinux 9.6 [TuxCare] Security Update: grafana-pcp (ALMALINUX9.6:CLSA-2026:1793210765)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793210765 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated...

Linux Distros Unpatched Vulnerability : CVE-2026-117962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6,...

Linux Distros Unpatched Vulnerability : CVE-2026-117870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and...

Linux Distros Unpatched Vulnerability : CVE-2026-118009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118009 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-99210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/rocket: clear rdev on device init failure rocketprobe stores the return value from rocketdeviceinit in the file-scoped rdev pointer before checking whethe...

Linux Distros Unpatched Vulnerability : CVE-2026-118024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118024 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-99101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: move attribute payload before shrinking its record ntfsnewattrflags resizes the non-resident attribute record before moving its name and mapping pairs to...

Linux Distros Unpatched Vulnerability : CVE-2026-99177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Fix page dirtying in sevgmempostpopulate setpagedirty requires that the caller hol...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146291 advisory. In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-registration after unregister packetsetring temporarily detaches...

PLANET IGS-5225-8P2T4S OS Command Injection (CVE-2026-81942)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146283)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146283 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR literal uprobe support The simulateldrliteral and...

Linux Distros Unpatched Vulnerability : CVE-2026-65631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion denial of service by submitting a crafted...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146320 advisory. In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146124 advisory. MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect. Tenable has extracted the preceding description block directly fro...

MiracleLinux 8 : idm:DL1 (AXSA:2026-2166:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2166:01 advisory. ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146150)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146150 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpadspisuspend retrieves the controller state wi...

TencentOS Server 3: mrtg (TSSA-2026:1202)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1202 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146301 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146326 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146286 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: take a reference on the socket found in afiucvhsrcv afiucvhsrcv looks up the destinatio...

Linux Distros Unpatched Vulnerability : CVE-2026-115906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the AES entry reader in src/aes.rs verifies its HMAC...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146254 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: clear sockops cb flags before force-closing a child socket A child socket inherits the...

RockyLinux 8 : flatpak (RLSA-2026:89859)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89859 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-99046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the bufstate and its attached buffer should be freed. In...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146267 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ipvsseq structs in ipvsconnnew Commit 9a05475cebdd ipvs: avoid kmemcachezalloc i...

Linux Distros Unpatched Vulnerability : CVE-2026-98986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: remove the fsnotify marks of a mount namespace in process context mntnsrelease drops the last passive reference of a mount namespace and removes its...

PLANET IGS-5225-8P2T4S Use of Weak Hash (CVE-2026-81946)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm with known weaknesses. An attacker who obtains the device configuration file can recover the privileged- mode access...

Linux Distros Unpatched Vulnerability : CVE-2026-116193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticated attackers skip authentication by...

Linux Distros Unpatched Vulnerability : CVE-2026-116577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly...

Hitachi Energy RTU500 Missing Authentication for Critical Function (CVE-2026-8065)

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or compromise the integri...

PLANET IGS-5225-8P2T4S Active Debug Code (CVE-2026-81943)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146148)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146148 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing...

Linux Distros Unpatched Vulnerability : CVE-2026-116539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcnwritetobytebuffer BIO callback caused by failing to wrap the...

RockyLinux 9 : python3.9 (RLSA-2026:89742)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89742 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verification...

Linux Distros Unpatched Vulnerability : CVE-2026-112085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry ...

RockyLinux 8 : freeipmi (RLSA-2026:89754)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89754 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code executio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146349 advisory. In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on buildskb failure qederxbuildskb and...

MiracleLinux 9 : bind-9.16.23-40.el9_8.12 (AXSA:2026-2169:14)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2169:14 advisory. bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses CVE-2026-19662 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146262 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width...

Oracle Linux 8 : emacs (ELSA-2026-90800)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90800 advisory. - Add missing untrusted-content variable definition fixes CVE-2026-96442 - Generalize trusted-content-p check to all Flymake backends CVE-2026-96442 Tenable ha...

Linux Distros Unpatched Vulnerability : CVE-2026-79979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The arm64 MMU backend invalidates a single virtual address from the TLB with invalidatetlbpage in arch/arm64/core/mmu.c, which issued TLBI VAE1IS with an operan...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146131 advisory. In MariaDB before 10.9.2, compresswrite in extra/mariabackup/dscompress.cc does not release datamutex upon a stream write failure, which allows local users to trigge...

Linux Distros Unpatched Vulnerability : CVE-2026-98921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldomkdir debug print ovldomkdir prints the input dentry with %pd after...

CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2026:1793119617)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793119617 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-hardening-ise-XU5EwX5T)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a...

RockyLinux 9 : freeipmi (RLSA-2026:89753)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89753 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code executio...