Back Tenable

Linux Distros Unpatched Vulnerability : CVE-2026-108978 | Tenable®

Tenable • October 13, 2026

Supported Sensors : Frictionless Assessment Agent , Nessus Agent , Agentless Assessment , Tenable Cloud Security , Tenable Self-Hosted Container Security , Nessus

Vector : CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source : CVE-2026-108978

Vector : CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Temporal Vector : CVSS:3.0/E:U/RL:U/RC:C

Vulnerability Information

CPE : cpe:/o:debian:debian_linux:12.0 , cpe:/o:debian:debian_linux:13.0 , cpe:/o:debian:debian_linux:14.0 , p-cpe:/a:debian:debian_linux:rlottie

Required KB Items : Host/local_checks_enabled , Host/cpu , global_settings/vendor_unpatched , Host/OS/identifier

Exploit Ease : No known exploits are available

Vulnerability Publication Date : 10/11/2026

Reference Information

CVE : CVE-2026-108978

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerabilities in RHEL 10 and Debian Linux Exposed Recent advisories have highlighted vulnerabilities affecting Red Hat Enterprise Linux (RHEL) 10 and Debian Linux distributions. RHEL 10 has multiple CVEs, including CVE-2026-91104 with a CVSS score of 9.3, published on 2026-09-16. The vulnerabilities could allow for significant impacts on confidentiality, integrity, and availability. Meanwhile, Debian Linux has reported CVE-2026-108978, a medium severity flaw published on 2026-10-11. Both advisories indicate that no known exploits are available at this time. System administrators are urged to apply patches promptly to mitigate potential risks. The vulnerabilities affect various components, including hplip and rlottie libraries. The patch for RHEL was published on 2026-10-14, while the Debian vulnerability was disclosed just days prior. 3 sources 73

Extracted Entities

CVEs (1)

CVE-2026-108978

Platforms (1)

Debian Linux