The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1409 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: pgsql extension does not check for errors during escaping (CVE-2025-1735)

    * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)

    * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Information disclosure via getimagesize() function when reading multi-chunk images     (CVE-2025-14177)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1380 advisory.

    A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild     under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It     is compatible with composer-cli and cockpit-composer clients.

    Security Fix(es):

    * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:1414 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327)

    * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147     and Thunderbird 147 (CVE-2026-0891)

    * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-0878)

    * firefox: Use-after-free in the IPC component (CVE-2026-0882)

    * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884)

    * firefox: Information disclosure in the Networking component (CVE-2026-0883)

    * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877)

    * firefox: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-0890)

    * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887)

    * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879)

    * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880)

    * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1338 advisory.

    The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts.
    These scripts interface with several services to allow operating in a high-availability (HA) environment.

    Security Fix(es):

    * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1350 advisory.

    The curl packages provide the libcurl library and the curl utility for downloading files from servers     using various protocols, including HTTP, FTP, and LDAP.

    Security Fix(es):

    * curl: libcurl: Curl out of bounds read for cookie path (CVE-2025-9086)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1332 advisory.

    The fence-agents packages provide a collection of scripts for handling remote power management for cluster     devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

    Security Fix(es):

    * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1379 advisory.

    A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild     under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It     is compatible with composer-cli and cockpit-composer clients.

    Security Fix(es):

    * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1374 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)

    * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service     (CVE-2025-12084)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1408 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)

    * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service     (CVE-2025-12084)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1377 advisory.

    A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild     under the hood.

    Security Fix(es):

    * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1349 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1336 advisory.

    The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts.
    These scripts interface with several services to allow operating in a high-availability (HA) environment.

    Security Fix(es):

    * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1339 advisory.

    The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts.
    These scripts interface with several services to allow operating in a high-availability (HA) environment.

    Security Fix(es):

    * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1327 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1323 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1324 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1334 advisory.

    The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard     math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system.
    Without these libraries, the Linux system cannot function correctly.

    Security Fix(es):

    * glibc: Integer overflow in memalign leads to heap corruption (CVE-2026-0861)

    * glibc: glibc: Information disclosure via zero-valued network query (CVE-2026-0915)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:1320 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * firefox: Spoofing issue in the Downloads Panel component (CVE-2025-14327)

    * firefox: Use-after-free in the JavaScript: GC component (CVE-2026-0885)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147     and Thunderbird 147 (CVE-2026-0891)

    * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component     (CVE-2026-0878)

    * firefox: Use-after-free in the IPC component (CVE-2026-0882)

    * firefox: Use-after-free in the JavaScript Engine component (CVE-2026-0884)

    * firefox: Information disclosure in the Networking component (CVE-2026-0883)

    * firefox: Mitigation bypass in the DOM: Security component (CVE-2026-0877)

    * firefox: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (CVE-2026-0890)

    * firefox: Clickjacking issue, information disclosure in the PDF Viewer component (CVE-2026-0887)

    * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics component (CVE-2026-0879)

    * firefox: Sandbox escape due to integer overflow in the Graphics component (CVE-2026-0880)

    * firefox: Incorrect boundary conditions in the Graphics component (CVE-2026-0886)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1340 advisory.

    The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts.
    These scripts interface with several services to allow operating in a high-availability (HA) environment.

    Security Fix(es):

    * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1326 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1330 advisory.

    The fence-agents packages provide a collection of scripts for handling remote power management for cluster     devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

    Security Fix(es):

    * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1331 advisory.

    The fence-agents packages provide a collection of scripts for handling remote power management for cluster     devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

    Security Fix(es):

    * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1329 advisory.

    The fence-agents packages provide a collection of scripts for handling remote power management for cluster     devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.

    Security Fix(es):

    * urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion (CVE-2025-66418)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1236 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: mm/compaction: fix UBSAN shift-out-of-bounds warning (CVE-2025-21815)

    * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)

    * kernel: Linux kernel drm/xe: Out-of-bounds shift in TLB invalidation (CVE-2025-37761)

    * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)

    * kernel: Linux kernel: ALSA: ump buffer overflow via malformed UMP SysEx message (CVE-2025-37891)

    * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)

    * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1230 advisory.

    The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures,     compliant with OpenPGP and S/MIME standards.

    Security Fix(es):

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0933 advisory.

    The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software     Development Kit.

    Security Fix(es):

    * JDK: Improve JMX connections (CVE-2026-21925)

    * JDK: Improve HttpServer Request handling (CVE-2026-21933)

    * JDK: Enhance Certificate Checking (CVE-2026-21945)

    * libpng: LIBPNG buffer overflow (CVE-2025-64720)

    * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1187 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0931 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * JDK: Improve JMX connections (CVE-2026-21925)

    * JDK: Improve HttpServer Request handling (CVE-2026-21933)

    * JDK: Enhance Certificate Checking (CVE-2026-21945)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1091 advisory.

    Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

    Security Fix(es):

    * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0932 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * JDK: Improve JMX connections (CVE-2026-21925)

    * JDK: Improve HttpServer Request handling (CVE-2026-21933)

    * JDK: Enhance Certificate Checking (CVE-2026-21945)

    * libpng: LIBPNG buffer overflow (CVE-2025-64720)

    * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)

    Bug Fix(es):

    * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would     fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the     CKA_ENCRYPT=true attribute to the key.  The configuration in this release is updated to include this     attribute. (RHEL-142865, RHEL-142866, RHEL-142867, RHEL-142868, RHEL-142869, RHEL-142870, RHEL-142871,     RHEL-142872, RHEL-142873, RHEL-142874)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1143 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel: Use-after-free in device mapper due to race condition in zone reporting     (CVE-2025-38141)

    * kernel: Linux kernel use-after-free in eventpoll (CVE-2025-38349)

    * kernel: drm/xe: Fix vm_bind_ioctl double free bug (CVE-2025-38731)

    * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)

    * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)

    * kernel: Linux kernel: Out-of-bounds write in Bluetooth MGMT can lead to information disclosure and     denial of service (CVE-2025-40294)

    * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)

    * kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CVE-2025-68305)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1090 advisory.

    Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

    Security Fix(es):

    * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1142 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Bluetooth: hci_event: call disconnect callback before deleting conn (CVE-2023-53673)

    * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)

    * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)

    * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1084 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected     SSH_AGENT_SUCCESS (CVE-2025-47913)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1194 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (CVE-2023-53034)

    * kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)

    * kernel: Linux kernel drm/xe: Out-of-bounds shift in TLB invalidation (CVE-2025-37761)

    * kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)

    * kernel: drm/xe: Use local fence in error path of xe_migrate_clear (CVE-2025-37869)

    * kernel: Linux kernel: Denial of service due to use-after-free in scsi: lpfc (CVE-2025-38289)

    * kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)

    * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)

    * kernel: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CVE-2025-40251)

    * kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318)

    * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1190 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1169 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1229 advisory.

    The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures,     compliant with OpenPGP and S/MIME standards.

    Security Fix(es):

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1148 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: Bluetooth: hci_event: call disconnect callback before deleting conn (CVE-2023-53673)

    * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)

    * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)

    * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1185 advisory.

    PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

    Security Fix(es):

    * php: heap-based buffer overflow in array_merge() (CVE-2025-14178)

    * php: PHP: Denial of Service via invalid character sequence in PDO PostgreSQL prepared statement     (CVE-2025-14180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1178 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel: Denial of Service due to data race in vmalloc's show_numa_info function     (CVE-2025-38383)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1025 advisory.

    A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild     under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It     is compatible with composer-cli and cockpit-composer clients.

    Security Fix(es):

    * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0701 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container     Platform 4.17.47. See the following advisory for the container images for     this release:

    https://access.redhat.com/errata/RHSA-2026:0715

    Security Fix(es):

    * runc: container escape via 'masked path' abuse due to mount race     conditions (CVE-2025-31133)
    * runc: container escape with malicious config due to /dev/console mount     and related races (CVE-2025-52565)
    * runc: opencontainers/selinux: container escape and denial of service due     to arbitrary write gadgets and procfs write redirects (CVE-2025-52881)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

    All OpenShift Container Platform 4.17 users are advised to upgrade to these     updated packages and images when they are available in the appropriate     release channel. To check for available updates, use the OpenShift CLI (oc)     or web console. Instructions for upgrading a cluster are available at     https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-     single/updating_clusters/index#updating-cluster-cli.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0676 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.63. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHBA-2026:0678

    Security Fix(es):

    * runc: container escape via 'masked path' abuse due to mount race conditions  (CVE-2025-31133)
    * runc: container escape with malicious config due to /dev/console mount and related races     (CVE-2025-52565)
    * runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and     procfs write redirects (CVE-2025-52881)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-     single/updating_clusters/index#updating-cluster-within-minor.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0928 advisory.

    The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software     Development Kit.

    Security Fix(es):

    * JDK: Improve JMX connections (CVE-2026-21925)

    * JDK: Improve HttpServer Request handling (CVE-2026-21933)

    * JDK: Enhance Certificate Checking (CVE-2026-21945)

    * libpng: LIBPNG buffer overflow (CVE-2025-64720)

    * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)

    Bug Fix(es):

    * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would     fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the     CKA_ENCRYPT=true attribute to the key.  The configuration in this release is updated to include this     attribute. (RHEL-142860, RHEL-142876, RHEL-142877, RHEL-142878, RHEL-142879, RHEL-142880)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0930 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * tornado: Tornado Quadratic DoS via Repeated Header Coalescing (CVE-2025-67725)

    * tornado: Tornado Quadratic DoS via Crafted Multipart Parameters (CVE-2025-67726)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0925 advisory.

    The libsoup packages provide an HTTP client and server library for GNOME.

    Security Fix(es):

    * libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value     Wins) (CVE-2025-14523)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0847 advisory.

    The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java     Software Development Kit.

    This release contains OpenJDK 11 with Extended Lifecycle Support for Red Hat Enterprise Linux versions 7,     8, and 9.

    Security Fix(es):

    * JDK: LIBPNG heap buffer overflow (CVE-2025-65018)
    * JDK: LIBPNG buffer overflow (CVE-2025-64720)
    * JDK: Improve JMX connections (CVE-2026-21925)
    * JDK: Improve HttpServer Request handling (CVE-2026-21933)
    * JDK: Enhance Certificate Checking (CVE-2026-21945)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0917 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Linux kernel: iommufd/iova_bitmap shift-out-of-bounds vulnerability (CVE-2025-21724)

    * kernel: KVM: arm64: Tear down vGIC on failed vCPU creation (CVE-2025-37849)

    * kernel: Linux kernel: ALSA: ump buffer overflow via malformed UMP SysEx message (CVE-2025-37891)

    * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)

    * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0921 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    Security Fix(es):

    * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate     (CVE-2025-61729)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
296762	RHEL 9 : php:8.2 (RHSA-2026:1409)	high
296761	RHEL 8 : osbuild-composer (RHSA-2026:1380)	medium
296760	RHEL 9 : thunderbird (RHSA-2026:1414)	high
296759	RHEL 8 : resource-agents (RHSA-2026:1338)	high
296758	RHEL 9 : curl (RHSA-2026:1350)	high
296757	RHEL 9 : fence-agents (RHSA-2026:1332)	high
296756	RHEL 9 : osbuild-composer (RHSA-2026:1379)	medium
296755	RHEL 8 : python3.11 (RHSA-2026:1374)	medium
296754	RHEL 9 : python3.12 (RHSA-2026:1408)	medium
296753	RHEL 9 : image-builder (RHSA-2026:1377)	medium
296752	RHEL 9 : openssl (RHSA-2026:1349)	high
296751	RHEL 7 : resource-agents (RHSA-2026:1336)	high
296701	RHEL 8 : resource-agents (RHSA-2026:1339)	high
296700	RHEL 10 : glib2 (RHSA-2026:1327)	high
296699	RHEL 9 : glib2 (RHSA-2026:1323)	high
296698	RHEL 9 : glib2 (RHSA-2026:1324)	high
296697	RHEL 10 : glibc (RHSA-2026:1334)	high
296696	RHEL 9 : thunderbird (RHSA-2026:1320)	high
296695	RHEL 8 : resource-agents (RHSA-2026:1340)	high
296694	RHEL 9 : glib2 (RHSA-2026:1326)	high
296693	RHEL 9 : fence-agents (RHSA-2026:1330)	high
296692	RHEL 9 : fence-agents (RHSA-2026:1331)	high
296691	RHEL 9 : fence-agents (RHSA-2026:1329)	high
296654	RHEL 10 : kernel (RHSA-2026:1236)	high
296653	RHEL 9 : gnupg2 (RHSA-2026:1230)	high
296652	RHEL 10 / 9 : java-25-openjdk (RHSA-2026:0933)	high
296628	RHEL 9 : php:8.2 (RHSA-2026:1187)	high
296627	RHEL 7 : java-1.8.0-openjdk (RHSA-2026:0931)	medium
296626	RHEL 8 : poppler (RHSA-2026:1091)	high
296625	RHEL 8 / 9 : java-1.8.0-openjdk (RHSA-2026:0932)	high
296624	RHEL 9 : kernel (RHSA-2026:1143)	high
296623	RHEL 10 : poppler (RHSA-2026:1090)	high
296622	RHEL 8 : kernel (RHSA-2026:1142)	high
296621	RHEL 9 : podman (RHSA-2026:1084)	high
296620	RHEL 9 : kernel (RHSA-2026:1194)	high
296619	RHEL 9 : php:8.3 (RHSA-2026:1190)	high
296618	RHEL 9 : php:8.2 (RHSA-2026:1169)	high
296617	RHEL 9 : gnupg2 (RHSA-2026:1229)	high
296601	RHEL 8 : kernel-rt (RHSA-2026:1148)	high
296600	RHEL 10 : php (RHSA-2026:1185)	high
296599	RHEL 10 : kernel (RHSA-2026:1178)	medium
295329	RHEL 8 : osbuild-composer (RHSA-2026:1025)	medium
295328	RHEL 9 : OpenShift Container Platform 4.17.47 (RHSA-2026:0701)	high
295327	RHEL 8 / 9 : OpenShift Container Platform 4.13.63 (RHSA-2026:0676)	high
295326	RHEL 10 / 8 / 9 : java-21-openjdk (RHSA-2026:0928)	high
295028	RHEL 8 : pcs (RHSA-2026:0930)	high
295027	RHEL 7 : libsoup (RHSA-2026:0925)	high
295026	RHEL 7 / 8 / 9 : java-11-openjdk ELS (RHSA-2026:0847)	high
295025	RHEL 9 : kernel (RHSA-2026:0917)	high
295024	RHEL 8 : go-toolset:rhel8 (RHSA-2026:0921)	high

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

medium

high

high

high

high

medium

medium

medium

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

high

high

high

high

high

high

high

high

high

high

high

high

medium

medium

high

high

high

high

high

high

high

high