The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61379 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301)

    * FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288)

    * FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291)

    * FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response     (CVE-2026-55194)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61313 advisory.

    rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and     subscription management.

    Security Fix(es):

    * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint     application (CVE-2026-33810)

    * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61233 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61316 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61256 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411)

    * kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)

    Bug Fix(es) and Enhancement(s):

    * vhost: reset the vring metadata cache on vring reconfiguration (JIRA:RHEL-224605)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61377 advisory.

    Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network     applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and     efficient, perfect for data-intensive real-time applications that run across distributed devices.

    Security Fix(es):

    * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw     (CVE-2026-58043)

    * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846)

    * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848)

    Bug Fix(es) and Enhancement(s):

    * nodejs24: Rebase to the latest Node.js 24 release [rhel-10.2.z] (JIRA:RHEL-220543)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61243 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security Fix(es):

    * NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend     (CVE-2026-10805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61310 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()     (CVE-2026-64002)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61376 advisory.

    Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network     applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and     efficient, perfect for data-intensive \ real-time applications that run across distributed devices.

    Security Fix(es):

    * nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw     (CVE-2026-58043)

    * nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks (CVE-2026-56846)

    * nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service (CVE-2026-56848)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61235 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61240 advisory.

    PipeWire is a multimedia server for Linux and other Unix like operating systems.

    Security Fix(es):

    * pipewire: RAOP RTSP NULL Deref (CVE-2026-14324)

    * pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61255 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation     (CVE-2026-6479)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61351 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)

    * kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()     (CVE-2026-46209)

    Bug Fix(es) and Enhancement(s):

    * [RHEL 10] Bonding reports unknown speed/duplex for tg3 interface [rhel-10.0.z] (JIRA:RHEL-182769)

    * CLONE -RHEL 10.0.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN     (JIRA:RHEL-224218)

    * vhost: reset the vring metadata cache on vring reconfiguration [rhel-10.0.z] (JIRA:RHEL-224544)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61234 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61374 advisory.

    Simple monitor script for use during development of a node.js app.  For use during development of a     node.js based application.  nodemon will watch the files in the directory in which nodemon was started,     and if any files change, nodemon will automatically restart your node application.  nodemon does not     require any changes to your code or method of development. nodemon simply wraps your node application and     keeps an eye on any files that have changed. Remember that nodemon is a replacement wrapper for node,     think of it as replacing the word node on the command line when you run your script.

    Security Fix(es):

    * brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation     (CVE-2026-69152)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61257 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of     service via resource exhaustion (CVE-2026-71217)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61231 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61239 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security Fix(es):

    * NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend     (CVE-2026-10805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61224 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61253 advisory.

    The golang packages provide the Go programming language compiler.

    Security Fix(es):

    * crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)

    * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint     application (CVE-2026-33810)

    * net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)

    * cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious     module proxy (CVE-2026-42501)

    * html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag     content (CVE-2026-39823)

    * cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)

    * net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed     SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)

    * net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)

    * net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)

    * net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially     bypassing security controls (CVE-2026-39825)

    * cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)

    * html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping     (CVE-2026-39826)

    * golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect     Punycode label processing (CVE-2026-39821)

    * net/textproto: golang: Golang net/textproto: Misleading error messages via input injection     (CVE-2026-42507)

    * crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries     (CVE-2026-27145)

    * golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61236 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61260 advisory.

    The sg3_utils packages provide command-line utilities for devices that use the Small Computer System     Interface (SCSI) command sets.

    Security Fix(es):

    * sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export     (CVE-2026-16313)

    Bug Fix(es) and Enhancement(s):

    * sg_inq output conformance for SCSI name string and ATA fields [rhel-9.4.z] (JIRA:RHEL-188128)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61261 advisory.

    The sg3_utils packages provide command-line utilities for devices that use the Small Computer System     Interface (SCSI) command sets.

    Security Fix(es):

    * sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export     (CVE-2026-16313)

    Bug Fix(es) and Enhancement(s):

    * sg_inq output conformance for SCSI name string and ATA fields (JIRA:RHEL-188127)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61227 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61232 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61250 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624)

    * FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299)

    * FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289)

    * FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow     (CVE-2026-68580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61258 advisory.

    Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and     uses strong cryptography to provide both authentication and encryption services. These services allow you     to build secure tunnels through untrusted networks such as virtual private network (VPN).

    Security Fix(es):

    * librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload     (CVE-2026-50721)

    * librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload     (CVE-2026-50722)

    * librenswan: IKEv2 Denial of Service via malformed fragmentation (CVE-2026-12413)

    * libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon     process (CVE-2026-14957)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61229 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61245 advisory.

    A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild     under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It     is compatible with composer-cli and cockpit-composer clients.

    Security Fix(es):

    * google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to     improper HTTP/2 path validation (CVE-2026-33186)

    * golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect     Punycode label processing (CVE-2026-39821)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61252 advisory.

    The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure     based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel     at boot time and initializes the system, so it can read and boot from the root partition.

    Security Fix(es):

    * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

    * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script     in die() (CVE-2026-15816)

    * dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module     (CVE-2026-16445)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61244 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security Fix(es):

    * NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend     (CVE-2026-10805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61248 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61251 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files (CVE-2026-64624)

    * FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message (CVE-2026-67299)

    * FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection (CVE-2026-67289)

    * FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow     (CVE-2026-68580)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61225 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61247 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free     (CVE-2026-6653)

    * libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61223 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61226 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61228 advisory.

    Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need     to recompile programs to handle authentication.

    Security Fix(es):

    * linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module (CVE-2026-54411)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61254 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation     (CVE-2026-6479)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61242 advisory.

    SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A     complete database is stored in a single disk file. The API is designed for convenience and ease of use.
    Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the     administrative hassles of supporting a separate database server.  Version 2 and version 3 binaries are     named to permit each to be installed on a single host  This package contains cross-compiled libraries and     development tools for Windows.

    Security Fix(es):

    * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60485 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60484 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: packet: use consistent hard_header_len in non-ring send paths ()

    * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60486 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: packet: use consistent hard_header_len in non-ring send paths ()

    * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60394 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60438 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60437 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60428 advisory.

    The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System     Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a     protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.

    Security Fix(es):

    * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)

    * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

    Bug Fix(es) and Enhancement(s):

    * [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as fw, although it should be static.
    [rhel-9.6.z] (JIRA:RHEL-191896)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60383 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)

    * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)

    * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)

    * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)

    * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)

    * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)

    * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60385 advisory.

    The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet     Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and     Fibre Channel devices (using iFCP gateways) on a TCP/IP network.

    Security Fix(es):

    * open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60304 advisory.

    The golang packages provide the Go programming language compiler.

    Security Fix(es):

    * encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal     (CVE-2026-33818)

    * net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution     (CVE-2026-56860)

    * net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service     (CVE-2026-56853)

    * html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)

    * crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages     (CVE-2026-56862)

    * encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)

    Bug Fix(es) and Enhancement(s):

    * Go 1.26 -- maxThreads limit hit in CGO threads blocked on RAND_bytes in FIPS mode (JIRA:RHEL-215845)

    * Update Go to version 1.26.7+1 [rhel-9.8.z] (JIRA:RHEL-246425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Severity
341716	RHEL 9 : freerdp (RHSA-2026:61379)	high
341715	RHEL 10 : rhc (RHSA-2026:61313)	high
341714	RHEL 8 : xmlrpc-c (RHSA-2026:61233)	high
341713	RHEL 9 : xmlrpc-c (RHSA-2026:61316)	high
341712	RHEL 8 : kernel (RHSA-2026:61256)	medium
341711	RHEL 10 : nodejs24 (RHSA-2026:61377)	high
341710	RHEL 9 : NetworkManager (RHSA-2026:61243)	medium
341709	RHEL 8 : kernel (RHSA-2026:61310)	high
341708	RHEL 10 : nodejs22 (RHSA-2026:61376)	high
341707	RHEL 8 : xmlrpc-c (RHSA-2026:61235)	high
341706	RHEL 9 : pipewire (RHSA-2026:61240)	medium
341705	RHEL 8 : postgresql:12 (RHSA-2026:61255)	high
341704	RHEL 10 : kernel (RHSA-2026:61351)	high
341703	RHEL 7 : xmlrpc-c (RHSA-2026:61234)	high
341702	RHEL 10 : nodejs-nodemon (RHSA-2026:61374)	high
341701	RHEL 8 : iperf3 (RHSA-2026:61257)	high
341700	RHEL 9 : xmlrpc-c (RHSA-2026:61231)	high
341699	RHEL 8 : NetworkManager (RHSA-2026:61239)	medium
341637	RHEL 8 : pam (RHSA-2026:61224)	high
341636	RHEL 9 : golang (RHSA-2026:61253)	high
341635	RHEL 8 : xmlrpc-c (RHSA-2026:61236)	high
341634	RHEL 9 : sg3_utils (RHSA-2026:61260)	high
341633	RHEL 9 : sg3_utils (RHSA-2026:61261)	high
341632	RHEL 7 : pam (RHSA-2026:61227)	high
341631	RHEL 9 : xmlrpc-c (RHSA-2026:61232)	high
341630	RHEL 8 : freerdp (RHSA-2026:61250)	critical
341629	RHEL 9 : libreswan (RHSA-2026:61258)	medium
341628	RHEL 10 : pam (RHSA-2026:61229)	high
341627	RHEL 9 : osbuild-composer (RHSA-2026:61245)	critical
341626	RHEL 8 : dracut (RHSA-2026:61252)	high
341625	RHEL 9 : NetworkManager (RHSA-2026:61244)	medium
341624	RHEL 8 : libxml2 (RHSA-2026:61248)	low
341623	RHEL 8 : freerdp (RHSA-2026:61251)	critical
341622	RHEL 8 : pam (RHSA-2026:61225)	high
341621	RHEL 9 : libxml2 (RHSA-2026:61247)	high
341620	RHEL 8 : pam (RHSA-2026:61223)	high
341619	RHEL 9 : pam (RHSA-2026:61226)	high
341618	RHEL 9 : pam (RHSA-2026:61228)	high
341617	RHEL 8 : postgresql:12 (RHSA-2026:61254)	high
341616	RHEL 8 : mingw-sqlite (RHSA-2026:61242)	medium
341094	RHEL 8 : kernel (RHSA-2026:60485)	critical
341093	RHEL 9 : kernel (RHSA-2026:60484)	critical
341092	RHEL 9 : kernel (RHSA-2026:60486)	critical
341051	RHEL 10 : libxml2 (RHSA-2026:60394)	low
341050	RHEL 9 : kernel-rt (RHSA-2026:60438)	critical
341049	RHEL 9 : kernel (RHSA-2026:60437)	critical
341003	RHEL 9 : iscsi-initiator-utils (RHSA-2026:60428)	high
341002	RHEL 7 : bind (RHSA-2026:60383)	high
341001	RHEL 8 : isns-utils (RHSA-2026:60385)	high
340975	RHEL 9 : golang (RHSA-2026:60304)	medium

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

high

high

high

medium

high

medium

high

high

high

medium

high

high

high

high

high

high

medium

high

high

high

high

high

high

high

critical

medium

high

critical

high

medium

low

critical

high

high

high

high

high

high

medium

critical

critical

critical

low

critical

critical

high

high

high

medium