The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-11627:08 advisory.

    * github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation     (CVE-2025-68156)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1013-1 advisory.

    dracut-saltboot:

    - Version update to 1.1.0:

      * Retry DHCP requests up to 3 times (bsc#1253004)

    golang-github-QubitProducts-exporter_exporter:

    - Non-customer-facing optimization and update

    golang-github-boynux-squid_exporter:

    - Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes (jsc#PED-14971):

      * Added compatibility for Squid 6 and support for the squid-internal-mgr metrics path
      * Added TLS and Basic Authentication to the exporters web interface
      * Added support for the exporter to authenticate against the Squid proxy itself
      * Allow the gathering of process information without requiring root privileges
      * The exporter can now be configured using environment variables
      * Added support for custom labels to all exported metrics for better data filtering
      * New metrics to track if Squid is running (squid_up), how long a scrape takes, and if any errors     occurred
      * Added 'service time' metrics to analyze proxy speed and performance.
      * Added a metric for open file descriptors (process_open_fds) to help prevent connection bottlenecks
      * Corrected the squid_client_http_requests_total metric to ensure accurate reporting


    golang-github-lusitaniae-apache_exporter:

    - Version update from 1.0.8 to 1.0.10:

      * Updated github.com/prometheus/client_golang to 1.21.1
      * Updated github.com/prometheus/common to 0.63.0
      * Updated github.com/prometheus/exporter-toolkit to 0.14.0
      * Fixed signal handler logging

    golang-github-prometheus-prometheus:

    - Security issues fixed:

      * CVE-2026-27606: Fixed arbitrary file write via path traversal in rollup (bsc#1258893)
      * CVE-2026-25547: Fixed unbounded brace range expansion leading to excessive CPU and memory consumption     (bsc#1257841)
      * CVE-2026-1615, CVE-2025-61140 The old web UI is no longer built due to security issues (bsc#1257897,     bsc#1257442)
      * CVE-2025-13465: Bump lodash package to version 4.17.23 to fix prototype pollution vulnerability     (bsc#1257329)
      * CVE-2025-12816: Interpretation conflict vulnerability allowing bypassing cryptographic verifications     (bsc#1255588)

    - Version update from 2.53.4 to 3.5.0 with the following highlighted changes (jsc#PED-13824):

      * Modernized Interface: Introduced a brand-new UI
      * Enhanced Cloud and Auth: Added unified AWS service discovery (EC2, ECS, Lightsail) and Azure Workload     Identity support         for more secure, native cloudauthentication.
      * Performance Standards: Fully integrated OpenTelemetry (OTLP) ingestion and moved Native Histograms     from experimental         to a stable feature.
      * Advanced Data Export: Rolled out Remote Write 2.0, offering better performance and metadata handling     when sending         data to external systems.
      * Query Power: Added new PromQL functions (like first_over_time and last_over_time) and optimization for     grouping         operations
      * Better Visibility: The UI now displays detailed relabeling steps, scrape intervals, and timeouts,     making it easier         to troubleshoot why targets aren't reporting correctly.
      * Critical Fixes: Resolved significant memory leaks related to query logging and fixed bugs where     targets were         accidentally being scraped multiple times

    grafana:

    - Security issues fixed:

      * CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled     (bsc#1258136)
      * CVE-2026-21721: Fixed access control by the dashboard permissions API (bsc#1257337)
      * CVE-2026-21720: Fixed unauthenticated DoS (bsc#1257349)
      * CVE-2025-68156: Fixed potential DoS via unbounded recursion in builtin functions (bsc#1255340)
      * CVE-2025-3415: Fixedexposure of DingDing alerting integration URL to Viewer level users (bsc#1245302)

    - Version update from 11.5.10 to 11.6.11 with the following highlighted changes and fixes:

      * Performance Boost: Introduced WebGL-powered geomaps for smoother map visualizations and         removed blurred backgrounds from UI overlays to speed up the interface
      * One-Click Actions: Visualizations now support faster navigation via one-click links and actions
      * Alerting History: Added version history for alert rules, allowing you to track changes over time
      * Service Accounts: Automated the migration of old API keys to more secure Service Accounts upon startup
      * Cron Support: Annotations now support Cron syntax for more flexible scheduling
      * Identity and Auth: Hardened the Avatar feature (now requires sign-in) and fixed several login     redirection issues         when Grafana is hosted on a subpath
      * Data Source Support: Added support for Cloud Partner Prometheus data sources and improved Azure legend     formatting
      * Alerting Limits: Added size limits for expanded notification templates to prevent system strain
      * RBAC: Integrated Role-Based Access Control (RBAC) into the Alertmanager via the reqAction field
      * Data Consistency: Fixed several issues with Graphite and InfluxDB regarding how variables are handled     in repeated         rows or nested queries
      * Dashboard Reliability: Resolved bugs involving row repeats and 'self-referencing' data links
      * Alerting Fixes: Patched a critical 'panic' (crash) caused by a race condition in alert rules and fixed     issues where         contact points weren't working correctly
      * URL Handling: Fixed a bug where 'true' values in URL parameters weren't being read correctly

    prometheus-blackbox_exporter:

    - Non-customer-facing optimization and update

    spacecmd:

    - Version update to 5.0.15:

      * Fixed typo in spacecmd help ca-cert flag (bsc#1253174)
      * Convert cached IDs to integer values (bsc#1251995)
      * Fixed spacecmd binary file upload (bsc#1253659)

    uyuni-tools:

    - Version update to 0.1.38:

      * Fixed cobbler configuration when migrating to standalone files (bsc#1256803)
      * Detect custom apache and squid config in the /etc/uyuni/proxy folder
      * Add ssh tuning to configure sshd (bsc#1253738)
      * Ignore supportconfig errors (bsc#1255781)
      * Bumped the default image tag to 5.0.7
      * Removed cgroup mount for podman containers (bsc#1253347)
      * Registry flag can be a string (bsc#1254589)
      * Use static supportconfig name to avoid dynamic search (bsc#1257941)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0327-1 advisory.

    Update to 1.12.2:

    Security fixes:

    - CVE-2025-68156: github.com/expr-lang/expr/builtin: Fixed potential DoS via unbounded recursion     (bsc#1255333):
    - CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: github.com/opencontainers/runc: Fixed container       breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1255074)

    Other fixes:

        - Add missing configuration parameter           deployment_name_from_replicaset to k8sattributes processor           (5b90a9d) (@dehaansa)
        - database_observability: Fix schema_details collector to fetch           column definitions with case sensitive table names (#4872)           (560dff4) (@jharvey10, @fridgepoet)
        - deps: Update jose2go to 1.7.0 (#4858) (dfdd341) (@jharvey10)
        - deps: Update npm dependencies [backport] (#5201) (8e06c26)           (@jharvey10)
        - Ensure the squid exporter wrapper properly brackets ipv6           addresses [backport] (#5205) (e329cc6) (@dehaansa)
        - Preserve meta labels in loki.source.podlogs (#5097) (ab4b21e)           (@kalleep)
        - Prevent panic in import.git when update fails [backport]           (#5204) (c82fbae) (@dehaansa, @jharvey10)
        - show correct fallback alloy version instead of v1.13.0           (#5110) (b72be99) (@dehaansa, @jharvey10)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:0512 advisory.

    Collector with the supported components for a Red Hat build of OpenTelemetry

    Security Fix(es):

    * github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation     (CVE-2025-68156)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20099-1 advisory.

    Changes in coredns:

    - fix CVE-2025-68156 bsc#1255345
    - fix CVE-2025-68161 bsc#1256411
    - Update to version 1.14.0:
      * core: Fix gosec G115 integer overflow warnings
      * core: Add regex length limit
      * plugin/azure: Fix slice init length
      * plugin/errors: Add optional show_first flag to consolidate directive
      * plugin/file: Fix for misleading SOA parser warnings
      * plugin/kubernetes: Rate limits to api server
      * plugin/metrics: Implement plugin chain tracking
      * plugin/sign: Report parser err before missing SOA
      * build(deps): bump github.com/expr-lang/expr from 1.17.6 to 1.17.7

    - Update to version 1.13.2:
      * core: Add basic support for DoH3
      * core: Avoid proxy unnecessary alloc in Yield
      * core: Fix usage of sync.Pool to save an alloc
      * core: Fix data race with sync.RWMutex for uniq
      * core: Prevent QUIC reload panic by lazily initializing the listener
      * core: Refactor/use reflect.TypeFor
      * plugin/auto: Limit regex length
      * plugin/cache: Remove superfluous allocations in item.toMsg
      * plugin/cache: Isolate metadata in prefetch goroutine
      * plugin/cache: Correct spelling of MaximumDefaultTTL in cache and dnsutil         packages
      * plugin/dnstap: Better error handling (redial & logging) when Dnstap is busy
      * plugin/file: Performance finetuning
      * plugin/forward: Disallow NOERROR in failover
      * plugin/forward: Added support for per-nameserver TLS SNI
      * plugin/forward: Prevent busy loop on connection err
      * plugin/forward: Add max connect attempts knob
      * plugin/geoip: Add ASN schema support
      * plugin/geoip: Add support for subdivisions
      * plugin/kubernetes: Fix kubernetes plugin logging
      * plugin/multisocket: Cap num sockets to prevent OOM
      * plugin/nomad: Support service filtering
      * plugin/rewrite: Pre-compile CNAME rewrite regexp
      * plugin/secondary: Fix reload causing secondary plugin goroutine to leak

    - Update to version 1.13.1:
      * core: Avoid string concatenation in loops
      * core: Update golang to 1.25.2 and golang.org/x/net to v0.45.0 on CVE fixes
      * plugin/sign: Reject invalid UTF8 dbfile token

    - Update to version 1.13.0:
      * core: Export timeout values in dnsserver.Server
      * core: Fix Corefile infinite loop on unclosed braces
      * core: Fix Corefile related import cycle issue
      * core: Normalize panics on invalid origins
      * core: Rely on dns.Server.ShutdownContext to gracefully stop
      * plugin/dnstap: Add bounds for plugin args
      * plugin/file: Fix data race in tree Elem.Name
      * plugin/forward: No failover to next upstream when receiving SERVFAIL or         REFUSED response codes
      * plugin/grpc: Enforce DNS message size limits
      * plugin/loop: Prevent panic when ListenHosts is empty
      * plugin/loop: Avoid panic on invalid server block
      * plugin/nomad: Add a Nomad plugin
      * plugin/reload: Prevent SIGTERM/reload deadlock

    - fix CVE-2025-58063 bsc#1249389
    - Update to version 1.12.4:
      * bump deps
      * fix(transfer): goroutine leak on axfr err (#7516)
      * plugin/etcd: fix import order for ttl test (#7515)
      * fix(grpc): check proxy list length in policies (#7512)
      * fix(https): propagate HTTP request context (#7491)
      * fix(plugin): guard nil lookups across plugins (#7494)
      * lint: add missing prealloc to backend lookup test (#7510)
      * fix(grpc): span leak on error attempt (#7487)
      * test(plugin): improve backend lookup coverage (#7496)
      * lint: enable prealloc (#7493)
      * lint: enable durationcheck (#7492)
      * Add Sophotech to adopters list (#7495)
      * plugin: Use %w to wrap user error (#7489)
      * fix(metrics): add timeouts to metrics HTTP server (#7469)
      * chore(ci): restrict token permissions (#7470)
      * chore(ci): pin workflow dependencies (#7471)
      * fix(forward): use netip package for parsing (#7472)
      * test(plugin): improve test coverage for pprof (#7473)
      * build(deps): bump github.com/go-viper/mapstructure/v2 (#7468)
      * plugin/file: fix label offset problem in ClosestEncloser (#7465)
      * feat(trace): migrate dd-trace-go v1 to v2 (#7466)
      * test(multisocket): deflake restart by using a fresh port and coordinated cleanup (#7438)
      * chore: update Go version to 1.24.6 (#7437)
      * plugin/header: Remove deprecated syntax (#7436)
      * plugin/loadbalance: support prefer option (#7433)
      * Improve caddy.GracefulServer conformance checks (#7416)

    - Update to version 1.12.3:
      * chore: Minor changes to `Dockerfile` (#7428)
      * Properly create hostname from IPv6 (#7431)
      * Bump deps
      * fix: handle cached connection closure in forward plugin (#7427)
      * plugin/test: fix TXT record comparison for multi-chunk vs multiple records
      * plugin/file: preserve case in SRV record names and targets per RFC 6763
      * fix(auto/file): return REFUSED when no next plugin is available (#7381)
      * Port to AWS Go SDK v2 (#6588)
      * fix(cache): data race when refreshing cached messages (#7398)
      * fix(cache): data race when updating the TTL of cached messages (#7397)
      * chore: fix docs incompatibility (#7390)
      * plugin/rewrite: Add EDNS0 Unset Action (#7380)
      * add args: startup_timeout for kubernetes plugin (#7068)
      * [plugin/cache] create a copy of a response to ensure original data is never          modified
      * Add support for fallthrough to the grpc plugin (#7359)
      * view: Add IPv6 example match (#7355)
      * chore: enable more rules from revive (#7352)
      * chore: enable early-return and superfluous-else from revive (#7129)
      * test(plugin): improve tests for auto (#7348)
      * fix(proxy): flaky dial tests (#7349)
      * test: add t.Helper() calls to test helper functions (#7351)
      * fix(kubernetes): multicluster DNS race condition (#7350)
      * lint: enable wastedassign linter (#7340)
      * test(plugin): add tests for any (#7341)
      * Actually invoke make release -f Makefile.release during test (#7338)
      * Keep golang to 1.24.2 due to build issues in 1.24.3 (#7337)
      * lint: enable protogetter linter (#7336)
      * lint: enable nolintlint linter (#7332)
      * fix: missing intrange lint fix (#7333)
      * perf(kubernetes): optimize AutoPath slice allocation (#7323)
      * lint: enable intrange linter (#7331)
      * feat(plugin/file): fallthrough (#7327)
      * lint: enable canonicalheader linter (#7330)
      * fix(proxy): avoid Dial hang after Transport stopped (#7321)
      * test(plugin): add tests for pkg/rand (#7320)
      * test(dnsserver): add unit tests for gRPC and QUIC servers (#7319)
      * fix: loop variable capture and linter (#7328)
      * lint: enable usetesting linter (#7322)
      * test: skip certain network-specific tests on non-Linux (#7318)
      * test(dnsserver): improve core/dnsserver test coverage (#7317)
      * fix(metrics): preserve request size from plugins (#7313)
      * fix: ensure DNS query name reset in plugin.NS error path (#7142)
      * feat: enable plugins via environment during build (#7310)
      * fix(plugin/bind): remove zone for link-local IPv4 (#7295)
      * test(request): improve coverage across package (#7307)
      * test(coremain): Add unit tests (#7308)
      * ci(test-e2e): add Go version setup to workflow (#7309)
      * kubernetes: add multicluster support (#7266)
      * chore: Add new maintainer thevilledev (#7298)
      * Update golangci-lint (#7294)
      * feat: limit concurrent DoQ streams and goroutines (#7296)
      * docs: add man page for multisocket plugin (#7297)
      * Prepare for the k8s api upgrade (#7293)
      * fix(rewrite): truncated upstream response (#7277)
      * fix(plugin/secondary): make transfer property mandatory (#7249)
      * plugin/bind: remove macOS bug mention in docs (#7250)
      * Remove `?bla=foo:443` for `POST` DoH (#7257)
      * Do not interrupt querying readiness probes for plugins (#6975)
      * Added `SetProxyOptions` function for `forward` plugin (#7229)

    -  Backported quic-go PR #5094: Fix parsing of ifindex from packets        to ensure compatibility with big-endian architectures        (see quic-go/quic-go#4978, coredns/coredns#6682).

    - Update to version 1.12.1:
      * core: Increase CNAME lookup limit from 7 to 10 (#7153)
      * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set
      * plugin/kubernetes: Revert only create PTR records for endpoints with         hostname defined
      * plugin/forward: added option failfast_all_unhealthy_upstreams to return         servfail if all upstreams are down
      * bump dependencies, fixing bsc#1239294 and bsc#1239728

    - Update to version 1.12.0:
      * New multisocket plugin - allows CoreDNS to listen on multiple sockets
      * bump deps

    - Update to version 1.11.4:
      * forward plugin: new option next, to try alternate upstreams when receiving         specified response codes upstreams on (functions like the external plugin         alternate)
      * dnssec plugin: new option to load keys from AWS Secrets Manager
      * rewrite plugin: new option to revert EDNS0 option rewrites in responses

    - Update to version 1.11.3+git129.387f34d:
      * fix CVE-2024-51744 (https://bugzilla.suse.com/show_bug.cgi?id=1232991)         build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#6955)
      * core: set cache-control max-age as integer, not float (#6764)
      * Issue-6671: Fixed the order of plugins. (#6729)
      * `root`: explicit mark `dnssec` support (#6753)
      * feat: dnssec load keys from AWS Secrets Manager (#6618)
      * fuzzing: fix broken oss-fuzz build (#6880)
      * Replace k8s.io/utils/strings/slices by Go stdlib slices (#6863)
      * Update .go-version to 1.23.2 (#6920)
      * plugin/rewrite: Add revert parameter for EDNS0 options (#6893)
      * Added OpenSSF Scorecard Badge (#6738)
      * fix(cwd): Restored backwards compatibility of Current Workdir (#6731)
      * fix: plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (#6705)
      * feature: log queue and buffer memory size configuration (#6591)
      * plugin/bind: add zone for link-local IPv6 instead of skipping (#6547)
      * only create PTR records for endpoints with hostname defined (#6898)
      * fix: reverter should execute the reversion in reversed order (#6872)
      * plugin/etcd: fix etcd connection leakage when reload (#6646)
      * kubernetes: Add useragent (#6484)
      * Update build (#6836)
      * Update grpc library use (#6826)
      * Bump go version from 1.21.11 to 1.21.12 (#6800)
      * Upgrade antonmedv/expr to expr-lang/expr (#6814)
      * hosts: add hostsfile as label for coredns_hosts_entries (#6801)
      * fix TestCorefile1 panic for nil handling (#6802)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300062.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3120 advisory.

    SSH Agent servers do not validate the size of messages when processing new identity requests, which may     cause the program to panic if the message is malformed due to an out of bounds read. (CVE-2025-47914)

    SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in     the request, allowing an attacker to cause unbounded memory consumption. (CVE-2025-58181)

    crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

    An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in     the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not     prevent a leaf certificate from claiming the SAN *.example.com. (CVE-2025-61727)

    Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts     that will be printed out. Furthermore, the error string is constructed by repeated string concatenation,     leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in     excessive resource consumption. (CVE-2025-61729)

    Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin     functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal     over user-provided data structures without enforcing a maximum recursion depth. If the evaluation     environment contains deeply nested or cyclic data structures, these functions may recurse indefinitely     until exceed the Go runtime stack limit. This results in a stack overflow panic, causing the host     application to crash. While exploitability depends on whether an attacker can influence or inject cyclic     or pathologically deep data into theevaluation environment, this behavior represents a denial-of-service     (DoS) risk and affects overall library robustness. Instead of returning a recoverable evaluation error,     the process may terminate unexpectedly. In affected versions, evaluation of expressions that invoke     certain builtin functions on untrusted or insufficiently validated data structures can lead to a process-     level crash due to stack exhaustion. This issue is most relevant in scenarios where Expr is used to     evaluate expressions against externally supplied or dynamically constructed environments; cyclic     references (directly or indirectly) can be introduced into arrays, maps, or structs; and there are no     application-level safeguards preventing deeply nested input data. In typical use cases with controlled,     acyclic data, the issue may not manifest. However, when present, the resulting panic can be used to     reliably crash the application, constituting a denial of service. The issue has been fixed in the v1.17.7     versions of Expr. The patch introduces a maximum recursion depth limit for affected builtin functions.
    When this limit is exceeded, evaluation aborts gracefully and returns a descriptive error instead of     panicking. Additionally, the maximum depth can be customized by users via `builtin.MaxDepth`, allowing     applications with legitimate deep structures to raise the limit in a controlled manner. Users are strongly     encouraged to upgrade to the patched release, which includes both the recursion guard and comprehensive     test coverage to prevent regressions. For users who cannot immediately upgrade, some mitigations are     recommended. Ensure that evaluation environments cannot contain cyclic references, validate or sanitize     externally supplied data structures before passing them to Expr, and/or wrap expression evaluation with     panic recovery to prevent a full process crash (as a last-resort defensive measure). These workarounds     reduce risk but do not fully eliminate the issue without the patch. (CVE-2025-68156)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1037-1 advisory.

    - Security issues fixed:

      - CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled     (bsc#1258136)
      - CVE-2026-21721: Fixed access control by the dashboard permissions API (bsc#1257337)
      - CVE-2026-21720: Fixed unauthenticated DoS (bsc#1257349)
      - CVE-2025-68156: Fixed potential DoS via unbounded recursion in builtin functions (bsc#1255340)
      - CVE-2025-3415: Fixed exposure of DingDing alerting integration URL to Viewer level users (bsc#1245302)

    - Version update from 11.5.10 to 11.6.11 with the following highlighted changes and fixes:

      - Performance Boost: Introduced WebGL-powered geomaps for smoother map visualizations and         removed blurred backgrounds from UI overlays to speed up the interface.
      - One-Click Actions: Visualizations now support faster navigation via one-click links and actions.
      - Alerting History: Added version history for alert rules, allowing you to track changes over time.
      - Service Accounts: Automated the migration of old API keys to more secure Service Accounts upon     startup.
      - Cron Support: Annotations now support Cron syntax for more flexible scheduling.
      - Identity and Auth: Hardened the Avatar feature (now requires sign-in) and fixed several login     redirection issues         when Grafana is hosted on a subpath.
      - Data Source Support: Added support for Cloud Partner Prometheus data sources and improved Azure legend     formatting.
      - Alerting Limits: Added size limits for expanded notification templates to prevent system strain.
      - RBAC: Integrated Role-Based Access Control (RBAC) into the Alertmanager via the reqAction field.
      - Data Consistency: Fixed several issues with Graphite and InfluxDB regarding how variables are handled     in repeated         rows or nested queries.
      - Dashboard Reliability: Resolved bugs involving row repeats and 'self-referencing' data links.
      - Alerting Fixes: Patched a critical 'panic' (crash) caused by a race condition in alert rules and fixed     issues where         contact points weren't working correctly.
      - URL Handling: Fixed a bug where 'true' values in URL parameters weren't being read correctly

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20140-1 advisory.

    Update to 1.12.2:

    Security fixes:

    - CVE-2025-68156: github.com/expr-lang/expr/builtin: Fixed potential DoS via unbounded recursion     (bsc#1255333):
    - CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: github.com/opencontainers/runc: Fixed container       breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1255074)

    Other fixes:

        - Add missing configuration parameter           deployment_name_from_replicaset to k8sattributes processor           (5b90a9d) (@dehaansa)
        - database_observability: Fix schema_details collector to fetch           column definitions with case sensitive table names (#4872)           (560dff4) (@jharvey10, @fridgepoet)
        - deps: Update jose2go to 1.7.0 (#4858) (dfdd341) (@jharvey10)
        - deps: Update npm dependencies [backport] (#5201) (8e06c26)           (@jharvey10)
        - Ensure the squid exporter wrapper properly brackets ipv6           addresses [backport] (#5205) (e329cc6) (@dehaansa)
        - Preserve meta labels in loki.source.podlogs (#5097) (ab4b21e)           (@kalleep)
        - Prevent panic in import.git when update fails [backport]           (#5204) (c82fbae) (@dehaansa, @jharvey10)
        - show correct fallback alloy version instead of v1.13.0           (#5110) (b72be99) (@dehaansa, @jharvey10)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:0513 advisory.

    Collector with the supported components for a Red Hat build of OpenTelemetry

    Security Fix(es):

    * github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation     (CVE-2025-68156)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1358 advisory.

    SSH Agent servers do not validate the size of messages when processing new identity requests, which may     cause the program to panic if the message is malformed due to an out of bounds read. (CVE-2025-47914)

    SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in     the request, allowing an attacker to cause unbounded memory consumption. (CVE-2025-58181)

    crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

    An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in     the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not     prevent a leaf certificate from claiming the SAN *.example.com. (CVE-2025-61727)

    Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts     that will be printed out. Furthermore, the error string is constructed by repeated string concatenation,     leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in     excessive resource consumption. (CVE-2025-61729)

    Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin     functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal     over user-provided data structures without enforcing a maximum recursion depth. If the evaluation     environment contains deeply nested or cyclic data structures, these functions may recurse indefinitely     until exceed the Go runtime stack limit. This results in a stack overflow panic, causing the host     application to crash. While exploitability depends on whether an attacker can influence or inject cyclic     or pathologically deep data into theevaluation environment, this behavior represents a denial-of-service     (DoS) risk and affects overall library robustness. Instead of returning a recoverable evaluation error,     the process may terminate unexpectedly. In affected versions, evaluation of expressions that invoke     certain builtin functions on untrusted or insufficiently validated data structures can lead to a process-     level crash due to stack exhaustion. This issue is most relevant in scenarios where Expr is used to     evaluate expressions against externally supplied or dynamically constructed environments; cyclic     references (directly or indirectly) can be introduced into arrays, maps, or structs; and there are no     application-level safeguards preventing deeply nested input data. In typical use cases with controlled,     acyclic data, the issue may not manifest. However, when present, the resulting panic can be used to     reliably crash the application, constituting a denial of service. The issue has been fixed in the v1.17.7     versions of Expr. The patch introduces a maximum recursion depth limit for affected builtin functions.
    When this limit is exceeded, evaluation aborts gracefully and returns a descriptive error instead of     panicking. Additionally, the maximum depth can be customized by users via `builtin.MaxDepth`, allowing     applications with legitimate deep structures to raise the limit in a controlled manner. Users are strongly     encouraged to upgrade to the patched release, which includes both the recursion guard and comprehensive     test coverage to prevent regressions. For users who cannot immediately upgrade, some mitigations are     recommended. Ensure that evaluation environments cannot contain cyclic references, validate or sanitize     externally supplied data structures before passing them to Expr, and/or wrap expression evaluation with     panic recovery to prevent a full process crash (as a last-resort defensive measure). These workarounds     reduce risk but do not fully eliminate the issue without the patch. (CVE-2025-68156)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
282883	MiracleLinux 9 : opentelemetry-collector-0.135.0-2.el9_7 (AXSA:2025-11627:08)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/16	high
303779	SUSE SLES15 / openSUSE 15 : Security update 5.0.7 for Multi-Linux Manager Client Tools (SUSE-SU-2026:1013-1)	Nessus	SuSE Local Security Checks	2026/3/26	2026/3/26	critical
297190	SUSE SLED15 / SLES15 Security Update : alloy (SUSE-SU-2026:0327-1)	Nessus	SuSE Local Security Checks	2026/1/30	2026/1/30	high
283532	RHEL 9 : opentelemetry-collector (RHSA-2026:0512)	Nessus	Red Hat Local Security Checks	2026/1/13	2026/1/13	high
296576	openSUSE 16 Security Update : coredns (openSUSE-SU-2026:20099-1)	Nessus	SuSE Local Security Checks	2026/1/26	2026/1/26	medium
281798	Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3120 (ALAS-2025-3120)	Nessus	Amazon Linux Local Security Checks	2026/1/5	2026/2/24	medium
303789	SUSE SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2026:1037-1)	Nessus	SuSE Local Security Checks	2026/3/26	2026/4/30	high
297777	openSUSE 16 Security Update : alloy (openSUSE-SU-2026:20140-1)	Nessus	SuSE Local Security Checks	2026/2/4	2026/2/4	high
283496	RHEL 9 : opentelemetry-collector (RHSA-2026:0513)	Nessus	Red Hat Local Security Checks	2026/1/13	2026/1/13	high
282383	Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1358)	Nessus	Amazon Linux Local Security Checks	2026/1/8	2026/2/24	medium

检测

插件搜索

high

critical

high

high

medium

medium

high

high

high

medium