The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84721 advisory.

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running     on a computer network.

    Security Fix(es):

    * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)

    * wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)

    * wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)

    * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76879)

    * wireshark: Wireshark: Denial of Service via X.509IF protocol dissector crash (CVE-2026-76928)

    * wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)

    * wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector     (CVE-2026-95387)

    * wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-95389)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85000 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after     chip reset (CVE-2025-68745)

    * kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)

    * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)

    * kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)

    * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)

    * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)

    * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

    * kernel: kernel: strparser: use-after-free via msg_timer_work rearm after strp_done() cancellation ()

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84844 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields (CVE-2026-82397)

    * python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding (CVE-2024-14029)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84843 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields (CVE-2026-82397)

    * python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding (CVE-2024-14029)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:84887 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload     (CVE-2026-50721)

    * librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload     (CVE-2026-50722)

    * libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon     process (CVE-2026-14957)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:84571 advisory.

    The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC     3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.

    Security Fix(es):

    * rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an     unauthenticated remote peer to crash rsyslogd (CVE-2026-19654)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84842 advisory.

    Flatpak-builder is a tool for building flatpaks from sources.

    Security Fix(es):

    * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-     am`) (CVE-2026-86320)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84589 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function (CVE-2026-9496)

    * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85191 advisory.

    Xwayland is an X server for running X clients under Wayland.

    Security Fix(es):

    * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling     (CVE-2026-93516)

    * xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests     (CVE-2026-93521)

    * xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry     handling (CVE-2026-88812)

    * xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in     ProcXIPassiveUngrabDevice (CVE-2026-93523)

    * xorg-x11-server: glamor: size tmp_bits buffer for source coordinate  range in upload_boxes     (CVE-2026-93522)

    * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer     overflow (CVE-2026-93517)

    * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard     mapping resize (CVE-2026-93518)

    * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in     input_constrain_cursor() (CVE-2026-93519)

    * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode     handling (CVE-2026-93520)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:84795 advisory.

    The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows     you to communicate with AMQP servers using protocol version 0-9-1.

    Security Fix(es):

    * rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service (CVE-2026-44236)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84798 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields (CVE-2026-82397)

    * python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding (CVE-2024-14029)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84832 advisory.

    Flatpak-builder is a tool for building flatpaks from sources.

    Security Fix(es):

    * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-     am`) (CVE-2026-86320)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84834 advisory.

    Flatpak-builder is a tool for building flatpaks from sources.

    Security Fix(es):

    * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-     am`) (CVE-2026-86320)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:85099 advisory.

    GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG,     GIF, WebP, XPM, BMP images, among other formats.

    Security Fix(es):

    * libgd: buffer overflow when processing specially crafted GIF file (CVE-2026-9672)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84833 advisory.

    Flatpak-builder is a tool for building flatpaks from sources.

    Security Fix(es):

    * flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-     am`) (CVE-2026-86320)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84793 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)

    * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)

    * kernel: dm cache policy smq: fix missing locks in invalidating cache blocks (CVE-2026-53062)

    * kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush() (CVE-2026-63802)

    * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)

    * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)

    * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84744 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file (CVE-2026-90947)

    * gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions     (CVE-2026-90948)

    * gimp: integer overflow when generating a thumbnail preview for a PSD file (CVE-2026-92248)

    * gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file (CVE-2026-97185)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84796 advisory.

    OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image     processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are     specific to this format.  This package containes the binaries for OpenEXR.

    Security Fix(es):

    * OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing     (CVE-2026-34544)

    * OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files (CVE-2026-59184)

    * OpenEXR: OpenEXR: Information disclosure and denial of service due to out-of-bounds read     (CVE-2026-59189)

    * OpenEXR: OpenEXR: Denial of Service or Information Disclosure via crafted EXR image file     (CVE-2026-59982)

    * OpenEXR: OpenEXR: Information disclosure and denial of service via out-of-bounds read (CVE-2026-59981)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85135 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields (CVE-2026-82397)

    * python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding (CVE-2024-14029)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84573 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)

    * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key     (CVE-2026-31790)

    * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing     (CVE-2026-28390)

    * openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182)

    * openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445)

    * openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:85132 advisory.

    GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG,     GIF, WebP, XPM, BMP images, among other formats.

    Security Fix(es):

    * libgd: buffer overflow when processing specially crafted GIF file (CVE-2026-9672)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84576 advisory.

    The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC     3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.

    Security Fix(es):

    * rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an     unauthenticated remote peer to crash rsyslogd (CVE-2026-19654)

    * rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function     (CVE-2026-78002)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84588 advisory.

    This module implements the URI class. Objects of this class represent Uniform Resource Identifier     references as specified in RFC 2396 (and updated by RFC 2732).

    Security Fix(es):

    * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode     normalization (CVE-2026-19953)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84677 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)

    * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)

    * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)

    * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)

    * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84572 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB     encryption/decryption calls (CVE-2025-69418)

    * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key     (CVE-2026-31790)

    * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing     (CVE-2026-28390)

    * openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182)

    * openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445)

    * openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84703 advisory.

    Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network     applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and     efficient, perfect for data-intensive \ real-time applications that run across distributed devices.

    Security Fix(es):

    * pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function (CVE-2026-9496)

    * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:84580 advisory.

    GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG,     GIF, WebP, XPM, BMP images, among other formats.

    Security Fix(es):

    * libgd: buffer overflow when processing specially crafted GIF file (CVE-2026-9672)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84587 advisory.

    This module implements the URI class. Objects of this class represent Uniform Resource Identifier     references as specified in RFC 2396 (and updated by RFC 2732).

    Security Fix(es):

    * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode     normalization (CVE-2026-19953)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84586 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556)

    * libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557)

    * libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558)

    * libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:84595 advisory.

    A filesystem browser for Cockpit

    Security Fix(es):

    * cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste     (CVE-2026-91202)

    * cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race (CVE-2026-91205)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84590 advisory.

    This module implements the URI class. Objects of this class represent Uniform Resource Identifier     references as specified in RFC 2396 (and updated by RFC 2732).

    Security Fix(es):

    * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode     normalization (CVE-2026-19953)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:84579 advisory.

    GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG,     GIF, WebP, XPM, BMP images, among other formats.

    Security Fix(es):

    * libgd: buffer overflow when processing specially crafted GIF file (CVE-2026-9672)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84585 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery     functions (CVE-2026-14662)

    * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump     (CVE-2026-18408)

    * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN     (CVE-2026-6464)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion with internal arguments     (CVE-2026-14680)

    * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl     (CVE-2026-14677)

    * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound     (CVE-2026-15742)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)

    * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)

    * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)

    * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow     (CVE-2026-14670)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84591 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219)

    * emacs: emacs: Command injection via crafted filenames in TRAMP (CVE-2026-79992)

    * emacs: Emacs: arbitrary code execution in Flymake mode (CVE-2026-96442)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84593 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href (CVE-2026-49825)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84584 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read     (CVE-2026-87596)

    * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page     (CVE-2026-87500)

    * chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE     (CVE-2026-87654)

    * chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability (CVE-2026-87621)

    * chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in     ANGLE (CVE-2026-87512)

    * chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free     (CVE-2026-87648)

    * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page     (CVE-2026-87602)

    * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page     (CVE-2026-87586)

    * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read     (CVE-2026-87604)

    * chromium-browser: angle: chromium-browser: Improper input validation in ANGLE (CVE-2026-91738)

    * chromium-browser: angle: chromium-browser: Uninitialized resource in ANGLE (CVE-2026-91720)

    Bug Fix(es) and Enhancement(s):

    * webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9 [rhel-8.10.z]     (JIRA:RHEL-274406)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:84582 advisory.

    Qt is a software toolkit for developing applications.  This package contains base tools, like string, xml,     and network handling.

    Security Fix(es):

    * qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML     serialization (CVE-2026-11573)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:84581 advisory.

    GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG,     GIF, WebP, XPM, BMP images, among other formats.

    Security Fix(es):

    * libgd: buffer overflow when processing specially crafted GIF file (CVE-2026-9672)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84594 advisory.

    The environment-modules packages provide dynamic modification of user environment using module files. Each     module file contains the information needed to configure the shell for an application. Once the package is     initialized, the environment can be modified on a per-module basis using the module utility, which     interprets module files.

    Security Fix(es):

    * environment-modules: Command injection in environment-modules Bash completion via malicious module names     containing shell metacharacters (CVE-2026-85013)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84583 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read     (CVE-2026-87596)

    * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page     (CVE-2026-87500)

    * chromium-browser: angle: Chromium: Arbitrary code execution via buffer overflow in ANGLE     (CVE-2026-87654)

    * chromium-browser: angle: Google Chrome (ANGLE): Arbitrary Code Execution vulnerability (CVE-2026-87621)

    * chromium-browser: angle: Chromium-browser: Arbitrary code execution via use-after-free vulnerability in     ANGLE (CVE-2026-87512)

    * chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome due to use-after-free     (CVE-2026-87648)

    * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page     (CVE-2026-87602)

    * chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page     (CVE-2026-87586)

    * chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds read     (CVE-2026-87604)

    * chromium-browser: angle: chromium-browser: Improper input validation in ANGLE (CVE-2026-91738)

    * chromium-browser: angle: chromium-browser: Uninitialized resource in ANGLE (CVE-2026-91720)

    Bug Fix(es) and Enhancement(s):

    * webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9 [rhel-9.8.z]     (JIRA:RHEL-274394)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84574 advisory.

    X.Org is an open-source implementation of the X Window System. It provides the basic low-level     functionality that full-fledged graphical user interfaces are designed upon.

    Security Fix(es):

    * xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling     (CVE-2026-93516)

    * xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer     overflow (CVE-2026-93517)

    * xorg-x11-server: xorg-x11-server: arbitrary code execution via integer truncation during keyboard     mapping resize (CVE-2026-93518)

    * xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in     input_constrain_cursor() (CVE-2026-93519)

    * xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode     handling (CVE-2026-93520)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:84575 advisory.

    GEGL (Generic Graphics Library) is a graph-based image processing framework.

    Security Fix(es):

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:84577 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689)

    * urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:84578 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689)

    * urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84592 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href (CVE-2026-49825)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83797 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83707 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

    * kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)

    * kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)

    * kernel: Linux kernel: xfrm single-frag length not properly limited ()

    * kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)

    * kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)

    * kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)

    * kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)

    * kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)

    * kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (CVE-2026-63993)

    * kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984)

    * kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)

    * kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)

    * kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)

    * kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086)

    * kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792)

    * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)

    Bug Fix(es) and Enhancement(s):

    * kernel panics caused by NULL pointer dereferences within octeon_ep_vf [rhel-10.0.z] (JIRA:RHEL-186344)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83775 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83738 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83739 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
367289	RHEL 10 : wireshark (RHSA-2026:84721)	critical
367288	RHEL 8 : kernel (RHSA-2026:85000)	high
367287	RHEL 8 : pcs (RHSA-2026:84844)	critical
367286	RHEL 8 : pcs (RHSA-2026:84843)	critical
367285	RHEL 8 : libreswan (RHSA-2026:84887)	medium
367284	RHEL 9 : rsyslog (RHSA-2026:84571)	high
367283	RHEL 9 : flatpak-builder (RHSA-2026:84842)	high
367282	RHEL 9 : nodejs:22 (RHSA-2026:84589)	high
367281	RHEL 10 : xorg-x11-server-Xwayland (RHSA-2026:85191)	high
367280	RHEL 10 : librabbitmq (RHSA-2026:84795)	high
367279	RHEL 8 : pcs (RHSA-2026:84798)	critical
367278	RHEL 9 : flatpak-builder (RHSA-2026:84832)	high
367277	RHEL 10 : flatpak-builder (RHSA-2026:84834)	high
367276	RHEL 8 : gd (RHSA-2026:85099)	high
367275	RHEL 9 : flatpak-builder (RHSA-2026:84833)	high
367274	RHEL 8 : kernel (RHSA-2026:84793)	high
367273	RHEL 8 : gimp:2.8 (RHSA-2026:84744)	high
367272	RHEL 10 : openexr (RHSA-2026:84796)	high
367271	RHEL 8 : pcs (RHSA-2026:85135)	critical
367270	RHEL 9 : openssl (RHSA-2026:84573)	high
367269	RHEL 8 : gd (RHSA-2026:85132)	high
367229	RHEL 9 : rsyslog (RHSA-2026:84576)	high
367228	RHEL 9 : perl-URI (RHSA-2026:84588)	medium
367227	RHEL 8 : kernel (RHSA-2026:84677)	high
367226	RHEL 9 : openssl (RHSA-2026:84572)	high
367225	RHEL 10 : nodejs22 (RHSA-2026:84703)	high
367224	RHEL 9 : gd (RHSA-2026:84580)	high
367223	RHEL 10 : perl-URI (RHSA-2026:84587)	medium
367222	RHEL 8 : libsoup (RHSA-2026:84586)	high
367221	RHEL 9 : cockpit-files (RHSA-2026:84595)	medium
367220	RHEL 8 : perl-URI (RHSA-2026:84590)	medium
367219	RHEL 9 : gd (RHSA-2026:84579)	high
367218	RHEL 7 : postgresql (RHSA-2026:84585)	high
367217	RHEL 10 : emacs (RHSA-2026:84591)	medium
367216	RHEL 8 : python-lxml (RHSA-2026:84593)	high
367215	RHEL 8 : webkit2gtk3 (RHSA-2026:84584)	critical
367214	RHEL 10 : qt6-qtbase (RHSA-2026:84582)	high
367213	RHEL 9 : gd (RHSA-2026:84581)	high
367212	RHEL 9 : environment-modules (RHSA-2026:84594)	high
367211	RHEL 9 : webkit2gtk3 (RHSA-2026:84583)	critical
367210	RHEL 9 : xorg-x11-server (RHSA-2026:84574)	high
367184	RHEL 9 : gegl04 (RHSA-2026:84575)	high
367183	RHEL 9 : python3.14-urllib3 (RHSA-2026:84577)	high
367182	RHEL 10 : python3.14-urllib3 (RHSA-2026:84578)	high
367181	RHEL 8 : python-lxml (RHSA-2026:84592)	high
366687	RHEL 9 : kernel (RHSA-2026:83797)	high
366636	RHEL 10 : kernel (RHSA-2026:83707)	high
366635	RHEL 9 : kernel (RHSA-2026:83775)	high
366634	RHEL 9 : kernel (RHSA-2026:83738)	high
366633	RHEL 9 : kernel-rt (RHSA-2026:83739)	high

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

critical

high

critical

critical

medium

high

high

high

high

high

critical

high

high

high

high

high

high

high

critical

high

high

high

medium

high

high

high

high

medium

high

medium

medium

high

high

medium

high

critical

high

high

high

critical

high

high

high

high

high

high

high

high

high

high