Linux Distros Unpatched Vulnerability : CVE-2026-98928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Derive GUESTHASSVE from the SVE feature bit at EL2 pkvminitfeaturesfromhost take...

Adobe Creative Cloud < 6.11 Privilege escalation (APSB26-135)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 6.11. It is, therefore, affected by a vulnerability as referenced in the APSB26-135 advisory. - Uncontrolled Search Path Element CWE-427 potentially leading to Privilege escalation CVE-2026-104349 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2026-116096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file...

Linux Distros Unpatched Vulnerability : CVE-2026-99023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: sequencing: pcie-m2: Fix leaking array from ofregulatorbulkgetall ofregulatorbulkgetall allocates the consumers array and hands it to the caller, who is...

Adobe Substance 3D Painter 12.0.0 < 12.2.0 Multiple Vulnerabilities (APSB26-178)

The version of Adobe Substance 3D Painter installed on the remote host is prior to 12.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-178 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code execution CVE-2026-48379 -...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146274)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146274 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label wit...

Linux Distros Unpatched Vulnerability : CVE-2026-116486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146265 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-state in transrdma.c The rdma-state field is modified without...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146334 advisory. In the Linux kernel, the following vulnerability has been resolved: gtp: Fix use-after-free in gtpencapdestroy. syzkaller reported use-after-free in gtpencapdestroy....

Linux Distros Unpatched Vulnerability : CVE-2026-98913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146147 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721dbdpc With a listforeach loop, if we don't fin...

AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793135406)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793135406 advisory. - Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146270 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are...

PLANET IGS-5225-8P2T4S Stack-based Buffer Overflow (CVE-2026-81945)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service o...

Linux Distros Unpatched Vulnerability : CVE-2026-116261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afcfileopen of the file src/afc.c of the component AFC File...

CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2026:1793098886)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1793098886 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination...

Linux Distros Unpatched Vulnerability : CVE-2026-115384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write 16KB to the native...

Linux Distros Unpatched Vulnerability : CVE-2026-115921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction,...

Linux Distros Unpatched Vulnerability : CVE-2026-115909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9.0.0, ZipArchive::extract in src/read/mod.rs calls...

Linux Distros Unpatched Vulnerability : CVE-2026-65628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - josejwk:sharedsecret/2 exposed in Elixir as JOSE.JWK.sharedsecret/2 derives an ECDH shared secret from two JWKs. Its first function clause only matches when bot...

Linux Distros Unpatched Vulnerability : CVE-2026-65626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146325 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer modestring uses snprintf which can return a...

Linux Distros Unpatched Vulnerability : CVE-2026-115374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that allows presigned URL holders to inject...

Linux Distros Unpatched Vulnerability : CVE-2026-98922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: emac: move setting of netops to fix crash fixes the following crash on driver...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146272 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-sl...

Oracle GoldenGate 23.x < 23.26.4.0.0 (October 2026 CPU)

The 23.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in Oracle GoldenGate component: Admin Server Executable. Supported versions that are affected are 23.4-23.26.3.0.0. Easily exploitabl...

CentOS Linux 8.4 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1793141050)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793141050 advisory. - Sinatra before 2.2.0 does not validate that the expanded path matches publicdir when serving static files. CVE-2022-29970 - Tornad...

Amazon Corretto Java 8.x < 8.512.09.1 Vulnerability

The version of Amazon Corretto installed on the remote host is 8 prior to 8.512.09.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2026-Oct-24 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2026-146133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146133 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read...

TencentOS Server 2: php (TSSA-2026:1239)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1239 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

SUSE SLES15: kubernetes1.35-client / kubernetes1.35-client-bash-completion / etc (SUSE-SU-2026:4912-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4912-1 advisory. This update for kubernetes-old rebuilds it against the current go security release. Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-115376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes by omittin...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146351 advisory. In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Free IRQs before removing the device In pciendpointtestremove, freeing the...

Oracle Linux 9 : python-urllib3 (ELSA-2026-90494)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-90494 advisory. - CVE-2026-97687 python-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override Resolves: RHEL-282326 Tenable has extracted...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: mariadb (UTSA-2026-146129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146129 advisory. MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146275)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146275 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: alb: re-check primaryispromisc under RTNL in bondalbmonitor bondalbmonitor reads...

AlmaLinux 9 : xdg-dbus-proxy (ALSA-2026:90522)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:90522 advisory. xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape CVE-2026-94422 Tenable has extracted the preceding description blo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146332)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146332 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtu32: reject invalid shift counts u32matchit executes rule-supplied shift operands on...

TencentOS Server 3: kernel (TSSA-2026:1224)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1224 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-116541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcnwritetobytebuffer BIO write callback that overreports bytes...

Linux Distros Unpatched Vulnerability : CVE-2026-114348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146263)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146263 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipcl2sendmsg Syzbot reported a slab-use-after-free in ipvlanhardheader when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146252 advisory. In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -schildren Having the parent directory locked protects entri...

SUSE SLED15 / SLES15 Security Update : rekor (SUSE-SU-2026:4915-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4915-1 advisory. This update for rekor rebuilds it against the current go security release. Tenable has extracted the preceding...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146316)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146316 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation ipvsgetoutrt calls skbensurewritable which may...

Linux Distros Unpatched Vulnerability : CVE-2026-116259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afcgetdeviceinfokey of the file src/afc.c of the...

RockyLinux 10 : grafana (RLSA-2026:89732)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89732 advisory. grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/textproto: mime/multipart: golang: golang: Denial of...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146292 advisory. In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen...

Mozilla Firefox ESR < 153.6

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 153.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-120 advisory. - Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146255)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146255 advisory. In the Linux kernel, the following vulnerability has been resolved: rds: tcp: hold the RCU lock across ipv6chkaddr in rdstcpladdrcheck rdstcpladdrcheck looks up a...