The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3078 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Security Fix(es):

    * grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables     Cross?Dashboard Privilege Escalation (CVE-2026-21721)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3058 advisory.

    ImageMagick is an image display and manipulation tool for the X Window System that can read and write     multiple image formats.

    Security Fix(es):

    * ImageMagick: ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit     systems (CVE-2025-62171)

    * ImageMagick: ImageMagick: Arbitrary code execution via a crafted XBM image file (CVE-2026-23876)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:3053 advisory.

    Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning     operating systems that use Ignition.

    Security Fix(es):

    * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate     (CVE-2025-61729)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3067 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)

    * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)

    * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3039 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2746 advisory.

    Red Hat build of MicroShift is Red Hat's light-weight Kubernetes     orchestration solution designed for edge device deployments and is built     from the edge capabilities of Red Hat OpenShift Container Platform.
    MicroShift is an application that is deployed on top of Red Hat Enterprise     Linux devices at the edge, providing an efficient way to operate     single-node clusters in these low-resource environments.

    This advisory contains the RPM packages for Red Hat build of MicroShift     4.17.49. Read the following advisory for the container images for this     release:

    https://access.redhat.com/errata/RHSA-2026:2672

    Security Fix(es):

    * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service     due to large single-line payload (CVE-2025-65637)

    All Red Hat build of MicroShift 4.17 users are advised to use these updated     packages and images when they are available in the RPM repository.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:3031 advisory.

    The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG     (Portable Network Graphics) image format files. This version should be used only if you are unable to use     the current version of libpng.

    Security Fix(es):

    * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3034 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:3040 advisory.

    The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries     and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

    Security Fix(es):

    * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate     (CVE-2025-61729)

    * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)

    * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3033 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3037 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow     (CVE-2026-23534)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3041 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3032 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:3035 advisory.

    The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries     and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

    Security Fix(es):

    * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate     (CVE-2025-61729)

    * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)

    * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3038 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3036 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3042 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing     (CVE-2025-69419)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3013 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3012 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3010 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3011 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2670 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.17.49. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2026:2672

    Security Fix(es):

    * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line     payload (CVE-2025-65637)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-     single/updating_clusters/index#updating-cluster-cli.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2950 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: heap-based buffer overflow via specially crafted PSP file (CVE-2025-15059)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2949 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2952 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow     (CVE-2026-23534)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2920 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Security Fix(es):

    * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate     (CVE-2025-61729)

    * grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables     Cross?Dashboard Privilege Escalation (CVE-2026-21721)

    * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip     (CVE-2025-61728)

    * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)

    * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2969 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: heap-based buffer overflow via specially crafted PSP file (CVE-2025-15059)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2954 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2923 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2934 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2953 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: heap-based buffer overflow via specially crafted PSP file (CVE-2025-15059)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2930 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: heap-based buffer overflow via specially crafted PSP file (CVE-2025-15059)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2914 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Security Fix(es):

    * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate     (CVE-2025-61729)

    * grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables     Cross?Dashboard Privilege Escalation (CVE-2026-21721)

    * golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip     (CVE-2025-61728)

    * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)

    * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2658 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.16.57. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2026:2661     sha256:e179e1d1ed72417286499f8f075a00c43ef9ddb96de9bf0234dd3a28e448c5f1

    Security Fix(es):

    * github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line     payload (CVE-2025-65637)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-     single/updating_clusters/index#updating-cluster-cli.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2918 advisory.

    MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials.
    It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to     authenticate the UID and GID of another local or remote process within a group of hosts having common     users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients     within this security realm can create and validate credentials without the use of root privileges,     reserved ports, or platform-specific methods.

    Security Fix(es):

    * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery     (CVE-2026-25506)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2899 advisory.

    Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network     applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and     efficient, perfect for data-intensive \ real-time applications that run across distributed devices.

    Security Fix(es):

    * nodejs: Nodejs denial of service (CVE-2025-59465)

    * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)

    * nodejs: Nodejs file permissions bypass (CVE-2025-55130)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:2911 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects     (streaming API) (CVE-2026-21441)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2864 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * nodejs: Nodejs denial of service (CVE-2025-59465)

    * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)

    * nodejs: Nodejs file permissions bypass (CVE-2025-55130)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2866 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking     (CVE-2026-24049)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2865 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking     (CVE-2026-24049)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2821 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168)

    * kernel: Linux kernel Bluetooth: Denial of Service due to use-after-free in connection handling     (CVE-2023-53762)

    * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information     disclosure, or denial of service. (CVE-2025-40304)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2824 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a     malicious server. (CVE-2026-23530)

    * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability     (CVE-2026-23884)

    * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)

    * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution     (CVE-2026-23533)

    * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and     potential code execution. (CVE-2026-23531)

    * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow     (CVE-2026-23532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2818 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2771 advisory.

    EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package     contains a sample 64-bit UEFI firmware for QEMU and KVM.

    Security Fix(es):

    * openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 / 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:2823 advisory.

    New 2.4.3 version of discovery-cli (dsc) is now available for Discovery 2.4. This version contains a fix     for CVE-2026-24049 .

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2776 advisory.

    EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package     contains a sample 64-bit UEFI firmware for QEMU and KVM.

    Security Fix(es):

    * openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2782 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)

    * nodejs: Nodejs denial of service (CVE-2026-21637)

    * nodejs: Nodejs denial of service (CVE-2025-59466)

    * nodejs: Nodejs denial of service (CVE-2025-59465)

    * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)

    * nodejs: Nodejs file permissions bypass (CVE-2025-55130)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2817 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2819 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2781 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * nodejs: Nodejs filesystem permissions bypass (CVE-2025-55132)

    * nodejs: Nodejs denial of service (CVE-2026-21637)

    * nodejs: Nodejs denial of service (CVE-2025-59466)

    * nodejs: Nodejs denial of service (CVE-2025-59465)

    * nodejs: Nodejs uninitialized memory exposure (CVE-2025-55131)

    * nodejs: Nodejs file permissions bypass (CVE-2025-55130)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Severity
299784	RHEL 10 : grafana (RHSA-2026:3078)	high
299783	RHEL 7 : ImageMagick (RHSA-2026:3058)	critical
299782	RHEL 9 : butane (RHSA-2026:3053)	high
299772	RHEL 9 : freerdp (RHSA-2026:3067)	medium
299771	RHEL 8 : freerdp (RHSA-2026:3039)	high
299770	RHEL 9 : Red Hat build of MicroShift 4.17.49 (RHSA-2026:2746)	high
299769	RHEL 9 : libpng15 (RHSA-2026:3031)	high
299768	RHEL 9 : munge (RHSA-2026:3034)	high
299767	RHEL 9 : grafana-pcp (RHSA-2026:3040)	critical
299766	RHEL 10 : munge (RHSA-2026:3033)	high
299765	RHEL 9 : freerdp (RHSA-2026:3037)	high
299764	RHEL 8 : freerdp (RHSA-2026:3041)	high
299763	RHEL 8 : munge (RHSA-2026:3032)	high
299762	RHEL 10 : grafana-pcp (RHSA-2026:3035)	critical
299755	RHEL 8 : freerdp (RHSA-2026:3038)	high
299754	RHEL 8 : freerdp (RHSA-2026:3036)	high
299753	RHEL 8 : openssl (RHSA-2026:3042)	high
299629	RHEL 8 : munge (RHSA-2026:3013)	high
299628	RHEL 8 : munge (RHSA-2026:3012)	high
299627	RHEL 8 : munge (RHSA-2026:3010)	high
299626	RHEL 8 : munge (RHSA-2026:3011)	high
299584	RHEL 8 / 9 : OpenShift Container Platform 4.17.49 (RHSA-2026:2670)	high
299504	RHEL 9 : gimp (RHSA-2026:2950)	high
299503	RHEL 9 : munge (RHSA-2026:2949)	high
299502	RHEL 10 : freerdp (RHSA-2026:2952)	high
299501	RHEL 9 : grafana (RHSA-2026:2920)	critical
299500	RHEL 9 : gimp (RHSA-2026:2969)	high
299499	RHEL 10 : munge (RHSA-2026:2954)	high
299498	RHEL 9 : munge (RHSA-2026:2923)	high
299497	RHEL 9 : munge (RHSA-2026:2934)	high
299496	RHEL 9 : gimp (RHSA-2026:2953)	high
299495	RHEL 9 : gimp (RHSA-2026:2930)	high
299418	RHEL 10 : grafana (RHSA-2026:2914)	critical
299417	RHEL 8 / 9 : OpenShift Container Platform 4.16.57 (RHSA-2026:2658)	high
299416	RHEL 9 : munge (RHSA-2026:2918)	high
299415	RHEL 10 : nodejs22 (RHSA-2026:2899)	critical
299414	RHEL 7 : python-s3transfer (RHSA-2026:2911)	high
299384	RHEL 9 : nodejs:22 (RHSA-2026:2864)	critical
299383	RHEL 9 : python3.12-wheel (RHSA-2026:2866)	medium
299382	RHEL 10 : python-wheel (RHSA-2026:2865)	medium
299333	RHEL 8 : kernel-rt (RHSA-2026:2821)	high
299332	RHEL 9 : freerdp (RHSA-2026:2824)	high
299324	RHEL 10 : pcs (RHSA-2026:2818)	high
299323	RHEL 9 : edk2 (RHSA-2026:2771)	high
299322	RHEL 10 / 8 / 9 : Updated discovery-cli RPM versions 2.4.3 (Important) (RHSA-2026:2823)	medium
299313	RHEL 9 : edk2 (RHSA-2026:2776)	high
299312	RHEL 9 : nodejs:22 (RHSA-2026:2782)	medium
299310	RHEL 9 : pcs (RHSA-2026:2817)	high
299309	RHEL 9 : pcs (RHSA-2026:2819)	high
299308	RHEL 9 : nodejs:24 (RHSA-2026:2781)	medium

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

critical

high

medium

high

high

high

high

critical

high

high

high

high

critical

high

high

high

high

high

high

high

high

high

high

high

critical

high

high

high

high

high

high

critical

high

high

critical

high

critical

medium

medium

high

high

high

high

medium

high

medium

high

high

medium