There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs
    function, when repeatedly called by a host application or through deep alias nesting, can lead to
    corruption of internal program data. This corruption could potentially enable a local attacker to execute
    arbitrary code if the host application then unsafely processes the altered data. (CVE-2026-18739)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在命令行选项解析库 popt 中发现一个缺陷。主机应用程序重复调用时或通过深层别名嵌套调用 poptStuffArgs 函数中的差一错误可导致内部程序数据损坏。如果主机应用程序随后以不安全的方式处理修改后的数据，此损坏可能使本地攻击者能够执行任意代码。（CVE-2026-18739）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在命令列選項剖析程式庫 popt 中發現缺陷。當主機應用程式重複呼叫或透過深層別名巢狀結構呼叫時，poptStuffArgs 函式中的差一錯誤可能會導致內部程式資料損毀。如果主機應用程式隨後不安全地處理更改的資料，則此損毀可能會使本機攻擊者執行任意程式碼。（CVE-2026-18739）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - コマンドラインオプション解析ライブラリである popt に欠陥が見つかりました。poptStuffArgs 関数の off-by-one エラーが、ホストアプリケーションから、または深いエイリアスネスト化を通して繰り返し呼び出されると、内部プログラムデータが破損する可能性があります。この破損により、ホストアプリケーションが変更されたデータを安全でない方法で処理した場合、ローカルの攻撃者が任意のコードを実行する可能性があります。(CVE-2026-18739)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

According to the versions of the popt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs     function, when repeatedly called by a host application or through deep alias nesting, can lead to     corruption of internal program data. This corruption could potentially enable a local attacker to execute     arbitrary code if the host application then unsafely processes the altered data.(CVE-2026-18739)

Tenable has extracted the preceding description block directly from the EulerOS popt security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the popt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs     function, when repeatedly called by a host application or through deep alias nesting, can lead to     corruption of internal program data. This corruption could potentially enable a local attacker to execute     arbitrary code if the host application then unsafely processes the altered data.(CVE-2026-18739)

    A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration     content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of     an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful     exploitation could result in heap metadata corruption, potentially causing the affected process to become     unavailable (denial of service).(CVE-2026-18743)

Tenable has extracted the preceding description block directly from the EulerOS popt security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs     function, when repeatedly called by a host application or through deep alias nesting, can lead to     corruption of internal program data. This corruption could potentially enable a local attacker to execute     arbitrary code if the host application then unsafely processes the altered data. (CVE-2026-18739)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
478662	Echo: popt: security update to 1.19+dfsg-2+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	2026/11/9	2026/11/9	low
478662	Echo: popt: security update to 1.19+dfsg-2+e1	Tenable Cloud Security	Echo Local Security Checks	2026/11/9	2026/11/9	low
331876	Linux Distros 未修补的漏洞：CVE-2026-18739	Nessus	Misc.	2026/8/4	2026/11/10	low
331876	Linux Distros 未修補弱點：CVE-2026-18739	Nessus	Misc.	2026/8/4	2026/11/10	low
331876	Linux Distros のパッチ未適用の脆弱性: CVE-2026-18739	Nessus	Misc.	2026/8/4	2026/11/10	low
365056	EulerOS 2.0 SP11 : popt (EulerOS-SA-2026-4364)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/12	low
364861	EulerOS 2.0 SP13 : popt (EulerOS-SA-2026-4091)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/12	low
364982	EulerOS 2.0 SP11 : popt (EulerOS-SA-2026-4274)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/12	low
376782	EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4441)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	low
331876	Linux Distros Unpatched Vulnerability : CVE-2026-18739	Nessus	Misc.	2026/8/4	2026/11/10	low
376681	EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4518)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	low
364896	EulerOS 2.0 SP13 : popt (EulerOS-SA-2026-4182)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/12	low

检测

插件搜索

low

low

low

low

low

low

low

low

low

low

low

low