There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag
    deletion via the DELETE /v2/<name>/manifests/<tag> endpoint bypasses the storage.delete.enabled: false
    configuration, allowing any API client to remove tags from repositories even when the operator has
    explicitly disabled deletion. This vulnerability is fixed in 3.1.1. (CVE-2026-41888)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21841-1 advisory.

    Changes in hauler:

    - update vendor.tar to fix:

      * bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662:
        hauler: golang.org/x/crypto/ssh: authentication bypass and         deadlocks in the crypto/ssh library

    - update vendor.tar to fix:

      * bsc#1279416, CVE-2026-84304
      * bsc#1279296, CVE-2026-84303
      * bsc#1278934, CVE-2026-84445: google.golang.org/grpc: DoS via         crash due to missing ':authority' and 'Host' headers

    Update to 2.1.0 (bsc#1265425, CVE-2026-41888).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21983-1 advisory.

    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265758).
    - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted     plugin       (bsc#1261939).
    - CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to     insufficient plugin       provenance verification (bsc#1261935).
    - CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted     Chart       (bsc#1261938).
    - CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of     raw-length       headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510).
    - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the     storage.delete.enabled       configuration (bsc#1265428).
    - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token     realm to       exfiltrate credentials and refresh tokens (bsc#1270127).
    - CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload     (bsc#1271660).
    - CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks     (bsc#1276327).
    - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input     (bsc#1271997).
    - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families     (bsc#1281426).
    - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426).
    - CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025).
    - CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024).
    - CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426).
    - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS     certificate bypass       allows log telemetry interception and alteration (bsc#1281468).
    - CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-     driven log emission       (bsc#1281469).
    - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows     internal network       probing (bsc#1281112).
    - gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server     implementation       (bsc#1276514).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23984-1 advisory.

    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265758).
    - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted     plugin       (bsc#1261939).
    - CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to     insufficient plugin       provenance verification (bsc#1261935).
    - CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted     Chart       (bsc#1261938).
    - CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of     raw-length       headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510).
    - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the     storage.delete.enabled       configuration (bsc#1265428).
    - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token     realm to       exfiltrate credentials and refresh tokens (bsc#1270127).
    - CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload     (bsc#1271660).
    - CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks     (bsc#1276327).
    - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input     (bsc#1271997).
    - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families     (bsc#1281426).
    - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426).
    - CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025).
    - CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024).
    - CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426).
    - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS     certificate bypass       allows log telemetry interception and alteration (bsc#1281468).
    - CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-     driven log emission       (bsc#1281469).
    - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows     internal network       probing (bsc#1281112).
    - gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server     implementation       (bsc#1276514).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2049-1 advisory.

    This update for helm fixes the following issues

    Security issues:

    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265758).
    - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the     storage.delete.enabled       configuration (bsc#1265428).

    Non security issue:

    - Fix packages for %suse_version bump (jsc#PED-15794).
    - Update to version 3.21.0

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d7d99f08ff advisory.

    Automatic update for docker-distribution-3.1.1-1.fc45.

    ##### **Changelog**

    ```
    * Fri May  1 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.1-1
    - Update to release v3.1.1
    - Resolves: rhbz#2455529
    - Fixes CVE-2026-41888
    - Upstream fixes and updates
    - Temporary annocheck skip test for broken branch protection test on       aarch64
    * Mon Apr  6 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 3.1.0-1
    - Update to release v3.1.0
    - Resolves: rhbz#2455529, rhbz#2455654
    - Resolves CVE-2026-35172
    - Resolves CVE-2026-33540
    - Upstream fixes
    * Sun Feb  8 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 3.0.0-5
    - Remove duplicate lines
    * Mon Feb  2 2026 Maxwell G <maxwell@gtmx.me> - 3.0.0-4
    - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4212-1 advisory.

    Security issues fixed:

    - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2     :path pseudo-       header (bsc#1260283).
    - CVE-2026-33540: information disclosure via improper validation of authentication realm URL     (bsc#1261793).
    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265788).
    - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead     to a denial of       service (bsc#1262951).
    - CVE-2026-35172: information disclosure via stale references after content deletion (bsc#1262096).
    - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for     validation       bypass and privilege escalation (bsc#1266629).
    - CVE-2026-39827,CVE-2026-39828,CVE-2026-39829,CVE-2026-39830,CVE-2026-39831,       CVE-2026-39832,CVE-2026-39833,CVE-2026-39834,CVE-2026-39835,CVE-2026-42508,       CVE-2026-46595,CVE-2026-46597,CVE-2026-46598: golang.org/x/crypto/ssh: multiple issues (bsc#1268884).
    - CVE-2026-41888: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265429).
    - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input     (bsc#1272132).

    Changes for distribution:

    Update to 3.1.1:

     * Bounds-check the file basename in PurgeUploads Walk callback
     * Add S3 Express One Zone support to the S3 storage driver
     * Fix tag list endpoint in proxy mode
     * Clamp oversized `n` query parameter in proxy mode instead of      returning 400
     * See the full changelog below for the full list of changes.
     * internal/client/auth/challenge: cleanups and minor refactor
     * build(deps): bump      go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp      from 0.18.0 to 0.19.0 in the go_modules group across 1      directory
     * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otl      ptrace/otlptracehttp from 1.42.0 to 1.43.0 in the go_modules      group across 1 directory
     * build(deps): bump github/codeql-action from 4.34.1 to 4.35.1
     * chore(build): Bump go version to latest
     * refactor: use slices.Backward to simplify the code
     * fix(proxy): fix tag list endpoint in proxy mode
     * Update docker-compose structure in deploying.md
     * build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1
     * build(deps): bump actions/upload-pages-artifact from 4.0.0 to      5.0.0
     * build(deps): bump docker/login-action from 4.0.0 to 4.1.0
     * build(deps): bump docker/bake-action from 7.0.0 to 7.1.0
     * fix(proxy): clamp oversized n query param instead of
     * feat(s3): add express zone one support to S3 driver
     * fix(storage): bounds-check the file basename in PurgeUploads      Walk callback
     * chore(release): prepare for v3.1.1 release
     * Adds support for tag pagination
     * Fixes default credentials in Azure storage provider
     * Drops support for go1.23 and go1.24 and updates to go1.25
     * docs: Update to refer to new image tag v3
     * Fix default_credentials in azure storage provider
     * chore: make function comment match function name
     * build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in      the go_modules group across 1 directory
     * fix: implement JWK thumbprint for Ed25519 public keys
     * fix: Annotate code block from validation.indexes      configuration docs
     * feat: extract redis config to separate struct
     * Fix: resolve issue #4478 by using a temporary file for non-      append writes
     * build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2
     * docs: Add note about `OTEL_TRACES_EXPORTER`
     * fix: set OTEL traces to disabled by default
     * Fix markdown syntax for OTEL traces link in docs
     * Switch UUIDs to UUIDv7
     * refactor: replace map iteration with maps.Copy/Clone
     * s3-aws: fix build for 386
     * docs: Add OpenTelemetry links to quickstart docs
     * Fix S3 driver loglevel param
     * Fixed data race in TestSchedule test
     * Fixes #4683 - uses X/Y instead of Gx/Gy for thumbprint of      ecdsa keys
     * build(deps): bump actions/checkout from 4 to 5
     * Fix broken link to Docker Hub fair use policy
     * fix(registry/handlers/app): redis CAs
     * build(deps): bump actions/labeler from 5 to 6
     * build(deps): bump actions/setup-go from 5 to 6
     * build(deps): bump actions/upload-pages-artifact from 3 to 4
     * build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3
     * build(deps): bump github/codeql-action from 3.26.5 to 4.30.7
     * build(deps): bump github/codeql-action from 4.30.7 to 4.30.8
     * chore: labeler: add area/client mapping for      internal/client/**
     * client: add Accept headers to Exists() HEAD
     * feat(registry): Make graceful shutdown test robust
     * fix(registry): Correct log formatting for upstream challenge
     * build(deps): bump github/codeql-action from 4.30.8 to 4.30.9
     * build(deps): bump github/codeql-action from 4.30.9 to 4.31.3
     * refactor: remove redundant variable declarations in for loops
     * 'should' -> 'must' regarding redis eviction policy
     * build(deps): bump actions/checkout from 5 to 6
     * Incorrect warning hint
     * Add return error when list object
     * build(deps): bump actions/checkout from 5.0.1 to 6.0.0
     * build(deps): bump peter-evans/dockerhub-description from 4 to      5
     * fix: Logging regression for manifest HEAD requests
     * Add boolean parsing util
     * Expose `useFIPSEndpoint` for S3
     * Add Cloudfleet Container Registry to adopters
     * fix(ci): Fix broken Azure e2e storage tests
     * BUG: Fix notification filtering to work with actions when      mediatypes is empty
     * build(deps): bump actions/checkout from 6.0.0 to 6.0.1
     * build(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0
     * build(deps): bump github/codeql-action from 4.31.3 to 4.31.10
     * build(deps): bump github/codeql-action from 4.31.10 to 4.32.2
     * build(deps): bump actions/checkout from 6.0.1 to 6.0.2
     * update golangci-lint to v2.9 and fix linting issues
     * update to go1.25.7, alpine 3.23, xx v1.9.0
     * vendor: github.com/sirupsen/logrus v1.9.4
     * vendor: update golang.org/x/* dependencies
     * vendor: github.com/docker/docker-credential-helpers v0.9.5
     * vendor: github.com/opencontainers/image-spec v1.1.1
     * vendor: github.com/klauspost/compress v1.18.4
     * fix: prefer otel variables over hard coded service name
     * vendor: github.com/spf13/cobra v1.10.2
     * vendor: github.com/bshuster-repo/logrus-logstash-hook v1.1.0
     * fix: sync parent dir to ensure data is reliably stored
     * modernize code
     * vendor: github.com/docker/go-events 605354379745
     * vendor: github.com/go-jose/go-jose/v4 v4.1.3
     * build(deps): bump github/codeql-action from 4.32.2 to 4.32.5
     * build(deps): bump docker/login-action from 3 to 4
     * build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0
     * build(deps): bump docker/setup-buildx-action from 3 to 4
     * build(deps): bump docker/bake-action from 6 to 7
     * build(deps): bump docker/metadata-action from 5 to 6
     * fix: nil-check scheduler in `proxyingRegistry.Close()`
     * fix: set MD5 on GCS writer before first `Write` call in      `putContent`
     * docs: pull through cache will pull from remote multiple times
     * Update s3.md regionendpoint option
     * chore(deps): Bump Go to latest 1.25 in CI workflows and      go.mod
     * fix: correct Ed25519 JWK thumbprint `kty` from `'OTP'` to      `'OKP'`
     * Update vacuum.go
     * Opt: refector tag list pagination support (stage 1)
     * Correctly match environment variables to YAML-inlined structs      in configuration
     * Enable Redis TLS without client certificates
     * build(deps): bump actions/deploy-pages from 4 to 5
     * build(deps): bump github/codeql-action from 4.32.5 to 4.34.1
     * fix(registry/proxy): use detached context when flushing write      buffer
     * ci: pin actions and apply zizmor auto-fixes
     * build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
     * build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to      4.1.4 in the go_modules group across 1 directory
     * chore(app): warn when partial TLS config is used in Redis
     * feat(registry): enhance authentication checks in htpasswd      implementation
     * Opt: refactor tag list pagination support
     * build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0
     * build(deps): bump actions/configure-pages from 5.0.0 to 6.0.0
     * fix(vendor): fix broke vendor validation
     * chore(ci): Prep for v3.1 release
    - Update to version 3.1.0:
     * fix(vendor): fix broke vendpor validation
     * fix redis repo-scoped blob descriptor revocation
     * proxy: bind bearer realms to upstream trust boundary
    - restore directory ownership after last change
    - Move config files in systemd tmpfiles dir for immutable mode      (jsc#PED-14747)
     * Add distribution-registry.tmpfiles
     * This is the first v3 stable release since `v2.8.3` which is a      culmination of years of hard work of the container community      and registry maintainers!
     * If you are upgrading from `v2.x` and have never used any of      the release candidates, please familiarise yourselves with      the `v2.x` deprecations properly.
     * oss and swift storage drivers are no longer supported
     * `docker/libtrust` has been replaced with `go-jose/go-jose` in      https://github.com/distribution/distribution/pull/4096
     * `client` is no longer supported as a standalone package in      https://github.com/distribution/distribution/pull/4126
     * the default configuration path has changed to      `/etc/distribution/config.yml`
     * `ManifestBuilder` interface in 3886
     * `manifest.Versioned` has been deprecated in favor of      `oci.Versioned` in 3887
     * `reference` package has been moved to      github.com/distribution/reference in      https://github.com/distribution/distribution/pull/4063

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21793-1 advisory.

    Changes in hauler:

    - update to 2.1.0 (bsc#1265425, CVE-2026-41888):
      * `v2.1.0` is a **minor** release built on the containerd-         native foundation laid down in `v2.0.0`. The headline is that         `hauler store sync` and `hauler store add` are now fully         concurrent, with signature verification pinned to digests and         running in parallel too. Alongside that, this release adds an         audit trail, a store integrity checker, store-to-manifest         generation, private/insecure registry support across every         pull path, and a set of fixes for containerd imports, chunked         hauls, and Docker Hub reference handling.
      * **Notable dependency bumps:** Go  **1.26.6**;
        `containerd/v2`  2.3.4; `sigstore/cosign/v3`  3.1.3;
        `sigstore/sigstore`  1.10.9; `go-containerregistry`         0.22.0; `helm/v4`  4.2.4; `k8s.io` libs (apimachinery, api,         client-go)  0.37.0; `logrus`  1.10.2; `docker/go-metrics`         0.1.0; `sigstore/rekor`  1.5.4 (CVE resolution); plus         `x/mod` and `go-isatty`.

    - update to 2.0.3 (bsc#1276124,       CVE-2026-72817,CVE-2026-72815,CVE-2026-72816):
      * Bump k8s.io/apimachinery from 0.36.2 to 0.36.3 (backport         #688)
      * Bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 in the         go_modules group across 1 directory (backport #691)
      * fix for homebrew macOS binary quarantine (backport #690)
      * fix: process Helm deps before --add-images discovery         (backport #703)
      * update hauler store remove to handle registry reference as         part of string (backport #705)
      * fixed vuln for golang grpc

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag     deletion via the DELETE /v2/<name>/manifests/<tag> endpoint bypasses the storage.delete.enabled: false     configuration, allowing any API client to remove tags from repositories even when the operator has     explicitly disabled deletion. This vulnerability is fixed in 3.1.1. (CVE-2026-41888)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21816-1 advisory.

    Changes in hauler:

    Update to 2.1.0 (bsc#1265425, CVE-2026-41888, bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662,     ).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
441104	SCA: security update for github.com/distribution/distribution/v3 (GHSA-6pjf-3r9x-m592)	Tenable Self-Hosted Container Security	SCA Checks	5/5/2026	7/2/2026	medium
441104	SCA: security update for github.com/distribution/distribution/v3 (GHSA-6pjf-3r9x-m592)	Tenable Cloud Security	SCA Checks	5/5/2026	7/2/2026	medium
346192	openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21841-1)	Nessus	SuSE Local Security Checks	9/16/2026	9/16/2026	high
362531	openSUSE 16: helm / helm-bash-completion / helm-fish-completion / etc (openSUSE-SU-2026:21983-1)	Nessus	SuSE Local Security Checks	10/2/2026	10/2/2026	high
363069	SUSE SLES16: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:23984-1)	Nessus	SuSE Local Security Checks	10/6/2026	10/6/2026	high
316846	SUSE SLES15 Security Update : helm (SUSE-SU-2026:2049-1)	Nessus	SuSE Local Security Checks	5/26/2026	5/26/2026	medium
311486	Fedora 45 : docker-distribution (2026-d7d99f08ff)	Nessus	Fedora Local Security Checks	5/2/2026	5/18/2026	medium
346801	SUSE SLES15 Security Update : distribution (SUSE-SU-2026:4212-1)	Nessus	SuSE Local Security Checks	9/17/2026	9/17/2026	medium
343950	openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21793-1)	Nessus	SuSE Local Security Checks	9/9/2026	10/6/2026	medium
316428	Linux Distros Unpatched Vulnerability : CVE-2026-41888	Nessus	Misc.	5/22/2026	9/2/2026	medium
344661	openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21816-1)	Nessus	SuSE Local Security Checks	9/11/2026	9/11/2026	medium

Detections

Analytics

Plugins Search

medium

medium

high

high

high

medium

medium

medium

medium

medium

medium