The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6727 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)

    * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)

    * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)

    * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)

    * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)

    * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)

    * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)

    * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)

    * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)

    * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)

    * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages     (CVE-2026-31806)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6736 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)

    * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)

    * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)

    * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6725 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6712 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path     (CVE-2026-26965)

    * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline     (CVE-2026-26955)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6713 advisory.

    ImageMagick is an image display and manipulation tool for the X Window System that can read and write     multiple image formats.

    Security Fix(es):

    * ImageMagick: ImageMagick: Out-of-bounds read or write due to integer overflow in DIB coder     (CVE-2026-28693)

    * ImageMagick: ImageMagick: Denial of Service via uninitialized pointer dereference in JBIG decoder     (CVE-2026-28691)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6665 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path     (CVE-2026-26965)

    * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline     (CVE-2026-26955)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6692 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)

    * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6616 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path     (CVE-2026-26965)

    * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline     (CVE-2026-26955)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6631 advisory.

    FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including     PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed     fonts.

    Security Fix(es):

    * fontforge: FontForge: Remote Code Execution via malicious SFD file parsing (CVE-2025-15270)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6618 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification     (CVE-2025-14831)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6630 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification     (CVE-2025-14831)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6628 advisory.

    FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including     PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed     fonts.

    Security Fix(es):

    * fontforge: FontForge: Remote Code Execution via malicious SFD file parsing (CVE-2025-15270)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6571 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: nouveau: fix instmem race condition around ptr stores (CVE-2024-26984)

    * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)

    * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()     (CVE-2026-23231)

    * kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential     privilege escalation. (CVE-2025-71238)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6632 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service     (CVE-2025-38109)

    * kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure     (CVE-2026-23144)

    * kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code     execution (CVE-2026-23171)

    * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)

    * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)

    * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)

    * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6647 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive     (CVE-2026-4111)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6635 advisory.

    FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including     PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed     fonts.

    Security Fix(es):

    * fontforge: FontForge: Remote Code Execution via malicious SFD file parsing (CVE-2025-15270)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6572 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: nouveau: fix instmem race condition around ptr stores (CVE-2024-26984)

    * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)

    * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()     (CVE-2026-23231)

    * kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential     privilege escalation. (CVE-2025-71238)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6619 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)

    * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)

    * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)

    * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6617 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)

    * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)

    * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)

    * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6570 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel (net/mlx5): Use-after-free in ECVF vports unload leads to denial of service     (CVE-2025-38109)

    * kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity     check (CVE-2026-23111)

    * kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild     (CVE-2026-23210)

    * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain()     (CVE-2026-23231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6621 advisory.

    crun is a OCI runtime

    Security Fix(es):

    * crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6622 advisory.

    crun is a OCI runtime

    Security Fix(es):

    * crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6620 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)

    * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)

    * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)

    * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6300 advisory.

    GStreamer is a streaming media framework based on graphs of filters which operate on media data. The     gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

    Security Fix(es):

    * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)

    * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser     (CVE-2026-3082)

    * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay     (CVE-2026-3085)

    * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling     (CVE-2026-2921)

    * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)

    * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in RealMedia Demuxer (CVE-2026-2922)

    * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling     (CVE-2026-2923)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6310 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel: Use-after-free in BPF sockmap can lead to denial of service and privilege     escalation (CVE-2025-38154)

    * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180)

    * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)

    * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:6301 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)

    * Squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6499 advisory.

    libxslt is a library for transforming XML files into other textual formats (including HTML, plain text,     and other XML representations of the underlying data) using the standard XSLT stylesheet transformation     mechanism.

    Security Fix(es):

    * libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6540 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)

    * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)

    * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)

    * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6539 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)

    * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)

    * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)

    * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6469 advisory.

    The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG     (Portable Network Graphics) image format files. This version should be used only if you are unable to use     the current version of libpng.

    Security Fix(es):

    * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6466 advisory.

    The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG     (Portable Network Graphics) image format files. This version should be used only if you are unable to use     the current version of libpng.

    Security Fix(es):

    * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6470 advisory.

    This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and     Load functions for converting Perl data structures to YAML strings, and the other way around.

    Security Fix(es):

    * perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities     including a high-severity heap buffer overflow in the YAML emitter (CVE-2026-4177)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6461 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables     (CVE-2026-3497)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6473 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6502 advisory.

    Vim (Vi IMproved) is an updated and improved version of the vi editor.

    Security Fix(es):

    * vim: Vim: Arbitrary code execution via 'helpfile' option processing (CVE-2026-25749)

    * vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin (CVE-2026-28417)

    * vim: Vim: Denial of service and information disclosure via crafted swap file (CVE-2026-28421)

    * vim: Vim: Arbitrary code execution via command injection in glob() function (CVE-2026-33412)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6467 advisory.

    The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG     (Portable Network Graphics) image format files. This version should be used only if you are unable to use     the current version of libpng.

    Security Fix(es):

    * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6468 advisory.

    The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG     (Portable Network Graphics) image format files. This version should be used only if you are unable to use     the current version of libpng.

    Security Fix(es):

    * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6462 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables     (CVE-2026-3497)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6463 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables     (CVE-2026-3497)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6436 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Rsync: Out of bounds array access via negative index (CVE-2025-10158)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6445 advisory.

    The libpng12 package provides libpng 1.2, which is the previous version of the libpng library for     manipulating PNG (Portable Network Graphics) image format files. This version should be used in case that     it is not possible to use the current version of libpng.

    Security Fix(es):

    * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6427 advisory.

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency,     performance, and low memory usage.

    Security Fix(es):

    * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:6439 advisory.

    The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG     (Portable Network Graphics) image format files. This version should be used only if you are unable to use     the current version of libpng.

    Security Fix(es):

    * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6435 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    Security Fix(es):

    * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

    * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)

    * mariadb: MariaDB Server Crash (CVE-2023-52971)

    * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)

    * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6464 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)

    * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)

    * cpython: email header injection due to unquoted newlines (CVE-2026-1299)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6408 advisory.

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency,     performance, and low memory usage.

    Security Fix(es):

    * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6311 advisory.

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency,     performance, and low memory usage.

    Security Fix(es):

    * nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6391 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)

    * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

    * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)

    * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6382 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Security Fix(es):

    * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6390 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Rsync: Out of bounds array access via negative index (CVE-2025-10158)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
305135	RHEL 9 : freerdp (RHSA-2026:6727)	critical
305134	RHEL 8 : vim (RHSA-2026:6736)	high
305117	RHEL 6 : vim (RHSA-2026:6725)	high
305090	RHEL 8 : freerdp (RHSA-2026:6712)	high
305089	RHEL 7 : ImageMagick (RHSA-2026:6713)	high
305079	RHEL 8 : freerdp (RHSA-2026:6665)	high
305078	RHEL 10 : kernel (RHSA-2026:6692)	high
305073	RHEL 8 : freerdp (RHSA-2026:6616)	high
305072	RHEL 10 : fontforge (RHSA-2026:6631)	high
305071	RHEL 10 : gnutls (RHSA-2026:6618)	medium
305070	RHEL 9 : gnutls (RHSA-2026:6630)	medium
305069	RHEL 9 : fontforge (RHSA-2026:6628)	high
305068	RHEL 8 : kernel (RHSA-2026:6571)	high
305067	RHEL 10 : kernel (RHSA-2026:6632)	high
305066	RHEL 9 : libarchive (RHSA-2026:6647)	high
305065	RHEL 9 : fontforge (RHSA-2026:6635)	high
305064	RHEL 8 : kernel-rt (RHSA-2026:6572)	high
305063	RHEL 9 : vim (RHSA-2026:6619)	high
305048	RHEL 7 : vim (RHSA-2026:6617)	high
305047	RHEL 9 : kernel (RHSA-2026:6570)	high
305046	RHEL 9 : crun (RHSA-2026:6621)	high
305045	RHEL 10 : crun (RHSA-2026:6622)	high
305044	RHEL 9 : vim (RHSA-2026:6620)	high
304997	RHEL 9 : gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free (RHSA-2026:6300)	high
304996	RHEL 9 : kernel (RHSA-2026:6310)	high
304995	RHEL 9 : squid (RHSA-2026:6301)	critical
304795	RHEL 9 : libxslt (RHSA-2026:6499)	medium
304794	RHEL 9 : vim (RHSA-2026:6540)	high
304793	RHEL 9 : vim (RHSA-2026:6539)	high
304733	RHEL 8 : libpng15 (RHSA-2026:6469)	high
304732	RHEL 8 : libpng15 (RHSA-2026:6466)	high
304731	RHEL 8 : perl-YAML-Syck (RHSA-2026:6470)	critical
304730	RHEL 8 : openssh (RHSA-2026:6461)	medium
304729	RHEL 8 : python3 (RHSA-2026:6473)	high
304728	RHEL 10 : vim (RHSA-2026:6502)	high
304727	RHEL 8 : libpng15 (RHSA-2026:6467)	high
304726	RHEL 8 : libpng15 (RHSA-2026:6468)	high
304725	RHEL 9 : openssh (RHSA-2026:6462)	medium
304701	RHEL 10 : openssh (RHSA-2026:6463)	medium
304700	RHEL 8 : rsync (RHSA-2026:6436)	medium
304699	RHEL 8 : libpng12 (RHSA-2026:6445)	high
304698	RHEL 9 : nginx:1.26 (RHSA-2026:6427)	high
304697	RHEL 8 : libpng15 (RHSA-2026:6439)	high
304696	RHEL 8 : mariadb:10.11 (RHSA-2026:6435)	medium
304695	RHEL 7 : python3 (RHSA-2026:6464)	medium
304662	RHEL 9 : nginx (RHSA-2026:6408)	high
304661	RHEL 10 : nginx (RHSA-2026:6311)	high
304660	RHEL 8 : mysql:8.4 (RHSA-2026:6391)	medium
304659	RHEL 9 : grafana (RHSA-2026:6382)	high
304658	RHEL 9 : rsync (RHSA-2026:6390)	medium

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

critical

high

high

high

high

high

high

high

high

medium

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

high

critical

medium

high

high

high

high

critical

medium

high

high

high

high

medium

medium

medium

high

high

high

medium

medium

high

high

medium

high

medium