The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2400-1 advisory.

    Update to version 1.7.4, fixes various go embedded security issues:

    - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML     documents       (bsc#1251420).
    - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected     message type in       response to a key listing or signing request (bsc#1253559).
    - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an     out of bounds       read (bsc#1254014).
    - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory     consumption       (bsc#1253935).
    - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when     processing specially       crafted input (bsc#1251615).
    - CVE-2026-7374: virt-handler: Privilege escalation and node compromise via symlink following     vulnerability       (bsc#1265467).
    - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2     :path pseudo-       header (bsc#1260234).

    Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.7.4

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-openSUSE-RU-2026:20010-1 advisory.

    - Update to version 0.68.2:
      * release: v0.68.2 [release/v0.68] (#9950)
      * fix(deps): bump alpine from `3.22.1` to `3.23.0` [backport: release/v0.68] (#9949)
      * ci: enable `check-latest` for `setup-go` [backport: release/v0.68] (#9946)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20132-1 advisory.

    elemental-register was updated to 1.8.1:

    Changes on top of v1.8.1:

      * Update headers to 2026
      * Update questions to include SL Micro 6.2

    Update to v1.8.1:

      * Install yip config files in before-install step
      * Bump github.com/rancher-sandbox/go-tpm and its dependencies         This includes few CVE fixes:
        * bsc#1241826 (CVE-2025-22872)
        * bsc#1241857 (CVE-2025-22872)
        * bsc#1251511 (CVE-2025-47911)
        * bsc#1251679 (CVE-2025-58190)

    elemental-toolkit was updated to v2.3.2:

      * Bump golang.org/x/crypto library         This includes few CVE fixes:
        * bsc#1241826 (CVE-2025-22872)
        * bsc#1241857 (CVE-2025-22872)
        * bsc#1251511 (CVE-2025-47911)
        * bsc#1251679 (CVE-2025-58190)
        * bsc#1253581 (CVE-2025-47913)
        * bsc#1253901 (CVE-2025-58181)
        * bsc#1254079 (CVE-2025-47914)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f33ade2ba6 advisory.

    This update aligns the package to the latest Upstream release, which is also the first stable version of     complyctl.

    It introduced the core redesign from OSCAL to Gemara. The project has gone through three pre-release     milestones (alpha, beta, RC) with contributions from 11 people across 200+ commits. This release marks the     point where the CLI surface, configuration format, provider gRPC API, and output formats are considered     stable under semantic versioning.
    More information in https://github.com/complytime/complyctl/releases/tag/v1.0.0

    The providers, formerly plugins, were also moved to their own repository and are no longer delivered in     the same package of complyctl. A new package called complytime-providers is being introduced to Fedora     repositories via https://bugzilla.redhat.com/show_bug.cgi?id=2526823



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
321638	SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:2400-1)	Nessus	SuSE Local Security Checks	6/20/2026	6/20/2026	medium
282650	openSUSE 16 : Recommended update for trivy (SUSE-SU-openSUSE-RU-2026:20010-1)	Nessus	SuSE Local Security Checks	1/13/2026	2/19/2026	medium
297788	openSUSE 16 Security Update : elemental-register, elemental-toolkit (openSUSE-SU-2026:20132-1)	Nessus	SuSE Local Security Checks	2/4/2026	2/19/2026	medium
315032	openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:20730-1)	Nessus	SuSE Local Security Checks	5/16/2026	5/16/2026	high
343965	Fedora 44 : complyctl (2026-f33ade2ba6)	Nessus	Fedora Local Security Checks	9/9/2026	9/9/2026	critical

Detections

Analytics

Plugins Search

medium

medium

medium

high

critical