There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to
    elevate privileges locally. (CVE-2026-69806)

  - Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
    (CVE-2026-58649)

  - Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized
    attacker to deny service over a network. (CVE-2026-69304)

  - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges
    over a network. (CVE-2026-69439)

  - Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a
    network. (CVE-2026-69522)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges
    over a network. (CVE-2026-69439)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges     over a network. (CVE-2026-69439)

  - Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a     network. (CVE-2026-69522, CVE-2026-71328)

  - External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a     network. (CVE-2026-69805)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges     over a network. (CVE-2026-69439)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
447887	Alpine: multiple aspnetcore9-runtime packages, multiple dotnet-host packages: security update to 9.0.20-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/9/10	2026/9/10	high
447887	Alpine: multiple aspnetcore9-runtime packages, multiple dotnet-host packages: security update to 9.0.20-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/9/10	2026/9/10	high
447857	SCA: security update for Microsoft.DiaSymReader.Native (GHSA-527h-q9f6-p7qx)	Tenable Self-Hosted Container Security	SCA Checks	2026/9/9	2026/9/9	high
447857	SCA: security update for Microsoft.DiaSymReader.Native (GHSA-527h-q9f6-p7qx)	Tenable Cloud Security	SCA Checks	2026/9/9	2026/9/9	high
344292	Microsoft Visual Studio Products (September 2026)	Nessus	Windows : Microsoft Bulletins	2026/9/9	2026/9/10	high
344381	Linux Distros Unpatched Vulnerability : CVE-2026-69439	Nessus	Misc.	2026/9/9	2026/9/10	high

检测

插件搜索

high

high

high

high

high

high