According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,     changing TLS options in one thread would inadvertently change them globally     and therefore possibly also affect other concurrently setup transfers.

    Disabling certificate verification for a specific transfer could     unintentionally disable the feature for other threads as well.(CVE-2025-14017)

    When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer     performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP,     POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new     target host.(CVE-2025-14524)

    When doing SSH-based transfers using either SCP or SFTP, and asked to do     public key authentication, curl would wrongly still ask and authenticate using     a locally running SSH agent.(CVE-2025-15224)

    When doing SSH-based transfers using either SCP or SFTP, and setting the     known_hosts file, libcurl could still mistakenly accept connecting to hosts
    *not present* in the specified file if they were added as recognized in the     libssh *global* known_hosts file.(CVE-2025-15079)

Tenable has extracted the preceding description block directly from the EulerOS curl security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0066-1 advisory.

    - CVE-2025-14524: Fixed bearer token leak on cross-protocol redirect (bsc#1255731)
      - CVE-2025-15079: Fixed unknown host connection acceptance when set in the global knownhostsfile     (bsc#1255733)
      - CVE-2025-14819: Fixed issue where alteration of CURLSSLOPT_NO_PARTIALCHAIN could       accidentally lead to CA cache reuse for which partial chain was reversed (bsc#1255732)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0101 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-15224:
    When doing SSH-based transfers using either SCP or SFTP, and asked to do     public key authentication, curl would wrongly still ask and authenticate using     a locally running SSH agent.

    CVE-2025-15079:
    When doing SSH-based transfers using either SCP or SFTP, and setting the     known_hosts file, libcurl could still mistakenly accept connecting to hosts
    *not present* in the specified file if they were added as recognized in the     libssh *global* known_hosts file.

    CVE-2025-14819:
    When doing TLS related transfers with reused easy or multi handles and     altering the  `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally     reuse a CA store cached in memory for which the partial chain option was     reversed. Contrary to the user's wishes and expectations. This could make     libcurl find and accept a trust chain that it otherwise would not.

    CVE-2025-14524:
    When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer     performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP,     POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new     target host.

    CVE-2025-14017:
    When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,     changing TLS options in one thread would inadvertently change them globally     and therefore possibly also affect other concurrently setup transfers.

    Disabling certificate verification for a specific transfer could     unintentionally disable the feature for other threads as well.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-02 advisory.

  - A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects     the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest     Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix     this issue. The associated identifier of this vulnerability is VDB-248999. (CVE-2023-7104)

  - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under     certain circumstances when the XML schematron has the <sch:name path=.../> schema elements. This flaw     allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the     program's crash using libxml or other possible undefined behaviors. (CVE-2025-49794)

  - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can     trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that     can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to     sensitive data being corrupted in memory. (CVE-2025-49796)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could     still mistakenly accept connecting to hosts *not present* in the specified file if they were added as     recognized in the libssh *global* known_hosts file. (CVE-2025-15079)

Note that Nessus relies on the presence of the package as reported by the vendor.

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory.

  - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. While the     vulnerability is in Oracle HTTP Server, attacks may significantly impact additional products (scope     change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or     modification access to critical data or all Oracle HTTP Server accessible data as well as unauthorized     access to critical data or complete access to all Oracle HTTP Server accessible data. (CVE-2026-34291)

  - Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi)     passes the shell-escaped query string to #exec cmd=... directives. This issue affects Apache HTTP Server     before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. (CVE-2025-58098)

  - Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes     to a malicious server via mod_rewrite or apache expressions that pass unvalidated request input. This issue     affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note: The Apache HTTP Server Project will be setting     a higher bar for accepting vulnerability reports regarding SSRF via UNC paths. The server offers limited     protection against administrators directing the server to open UNC paths. Windows servers should limit the     hosts they will connect over via SMB based on the nature of NTLM authentication. (CVE-2024-43394)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the curl package has been released.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20031-1 advisory.

    This update for curl fixes the following issues:

    - CVE-2025-14017: broken TLS options for threaded LDAPS (bsc#1256105).
    - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731).
    - CVE-2025-14819: libssh global knownhost override (bsc#1255732).
    - CVE-2025-15079: libssh key passphrase bypass without agent set (bsc#1255733).
    - CVE-2025-15224: OpenSSL partial chain store policy bypass (bsc#1255734).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of curl installed on the remote host is 7.58 <= 8.17.0. It is, therefore, affected by multiple vulnerabilities when built with the libssh backend:

- A key passphrase bypass vulnerability exists where curl wrongly authenticates using a locally   running SSH agent even when specifically asked to perform public key authentication.   (CVE-2025-15224)

- A global known_hosts override vulnerability exists where libcurl may mistakenly accept connections   to hosts not present in a specified known_hosts file if they are recognized in the libssh global   known_hosts file. (CVE-2025-15079)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
302387	EulerOS 2.0 SP12 : curl (EulerOS-SA-2026-1355)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	medium
282494	SUSE SLES12 Security Update : curl (SUSE-SU-2026:0066-1)	Nessus	SuSE Local Security Checks	2026/1/9	2026/4/30	medium
300436	TencentOS Server 4: curl (TSSA-2026:0101)	Nessus	Tencent Local Security Checks	2026/3/3	2026/4/30	medium
297102	Nessus Network Monitor < 6.5.3 Multiple Vulnerabilities (TNS-2026-02)	Nessus	Misc.	2026/1/29	2026/2/3	high
282308	Linux Distros Unpatched Vulnerability : CVE-2025-15079	Nessus	Misc.	2026/1/7	2026/4/8	medium
309968	Oracle HTTP Server (April 2026 CPU)	Nessus	Web Servers	2026/4/23	2026/4/27	high
309969	Oracle HTTP Server (April 2026 CPU)	Nessus	Web Servers	2026/4/23	2026/4/27	high
282640	Photon OS 5.0: Curl PHSA-2026-5.0-0732	Nessus	PhotonOS Local Security Checks	2026/1/13	2026/4/30	medium
287974	openSUSE 16 Security Update : curl (openSUSE-SU-2026:20031-1)	Nessus	SuSE Local Security Checks	2026/1/16	2026/4/30	medium
291361	Curl 7.58.0 < 8.18.0 Multiple Vulnerabilities	Nessus	Misc.	2026/1/19	2026/4/30	medium

检测

插件搜索

medium

medium

medium

high

medium

high

high

medium

medium

medium