The version of AOS installed on the remote host is prior to 7.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.6 advisory.

  - NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator     that enables denial of service and possible remote code execution as a result of deep copying a data     structure and erroneously overwriting a destination pointer. An adversary can exploit the vulnerability by     controlling a malicious signed zone and querying a vulnerable Unbound. When DS sub-queries need to suspend     validation due to NSEC3 computational budget exhaustion (introduced in Unbound 1.19.1), Unbound deep-     copies response messages to preserve them across memory region teardown. A struct-assignment bug     overwrites the destination's pointer with the source's pointer. After the sub-query region is freed, the     resumed validator dereferences this dangling pointer, triggering a crash or potentially enabling arbitrary     code execution. Unbound 1.25.1 contains a patch with a fix to preserve the correct pointer when deep     copying the data structure. (CVE-2026-33278)

  - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in     the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow.
    The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The     identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended     to deploy a patch. The code maintainer replied with [f]ixed for 2.46. (CVE-2025-11083)

  - A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in     the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable     characters (which would need escaping), the calculation of the length of the escaped string could     overflow, leading to a potential write off the end of the newly allocated string. (CVE-2025-13601)

  - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1552 contains a patch for the vulnerability. (CVE-2025-53905)

  - Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in     Vim's zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1551 contains a patch for the vulnerability. (CVE-2025-53906)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-27f16898ba advisory.

    Update to 1.52.2     Partially fixes CVE-2025-9615. To protect totally from it, see:
    https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2325.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4ba84b1f69 advisory.

    Updated to 1.52.0 release (CVE-2025-9615)

    Verify file permissions for private connections to prevent unprivileged     user from using other user's certs (CVE-2025-9615)

    Ensure NetworkManager dependency has CVE-2025-9615 update.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a1bc6c7e62 advisory.

    # Update to 6.0.4

    Update to address CVE-2025-9615 and CVE-2025-62291

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-87e30fe05b advisory.

    Automatic update for NetworkManager-ssh-1.4.3-1.fc45.

    ##### **Changelog**

    ```
    * Fri Apr  3 2026 Dan Fruehauf <malkodan@gmail.com> - 1.4.3-1
    - Always run autoreconf -fvi
    - Fix file access for private key and known hosts (rhbz#2428396)
    - Fix pkg-config macro
    - Move D-Bus policy file to /usr/share/dbus-1/system.d/

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21203-1 advisory.

    Update to strongswan 6.0.4:

    - CVE-2025-9615: NetworkManager File Access (bsc#1257359).
    - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS AVP (bsc#1259472).

    Changes for strongswan:

    - Fixed a vulnerability in the NetworkManager plugin that potentially      allows using credentials of other local users. This vulnerability      has been registered as CVE-2025-9615.
    - The maximum supported length for section names in swanctl.conf      has been increased to the upper limit of 256 characters that's      enforced by VICI.
    - Prevent a crash if a confused peer rekeys a Child SA twice before      sending a delete.
    - Fixed a memory leak if a peer's self-signed certificate is untrusted.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:18142 advisory.

    NetworkManager is a system network service that manages network devices and connections, attempting to     keep active network connectivity when available. Its capabilities include managing Ethernet, wireless,     mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of     different VPN services.

    Security Fix(es):

    * networkmanagr: NetworkManager File Access (CVE-2025-9615)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:18597 advisory.

    * networkmanagr: NetworkManager File Access (CVE-2025-9615)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18142 advisory.

    - Fix CVE-2025-9615 (RHEL-111772)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to     other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with     root privileges and can access files owned by users different from the one who added the connection.
    (CVE-2025-9615)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0d1cf2e45b advisory.

    Updated to 1.52.0 release (CVE-2025-9615)     Verify file permissions for private connections to prevent     unprivileged user from using other user's certs.

    Ensure NetworkManager dependency has CVE-2025-9615 update.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to     other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with     root privileges and can access files owned by users different from the one who added the     connection.(CVE-2025-9615)

Tenable has extracted the preceding description block directly from the EulerOS NetworkManager security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18597 advisory.

    - Fix CVE-2025-9615 (RHEL-111783)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
328839	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6)	Nessus	Misc.	2026/7/21	2026/8/4	critical
279368	Fedora 42 : NetworkManager (2025-27f16898ba)	Nessus	Fedora Local Security Checks	2025/12/19	2026/2/23	low
282623	Fedora 43 : NetworkManager-l2tp (2026-4ba84b1f69)	Nessus	Fedora Local Security Checks	2026/1/12	2026/2/17	low
302046	Fedora 44 : strongswan (2026-a1bc6c7e62)	Nessus	Fedora Local Security Checks	2026/3/12	2026/3/12	high
305019	Fedora 45 : NetworkManager-ssh (2026-87e30fe05b)	Nessus	Fedora Local Security Checks	2026/4/5	2026/4/5	low
309127	SUSE SLES16 Security Update : strongswan (SUSE-SU-2026:21203-1)	Nessus	SuSE Local Security Checks	2026/4/22	2026/4/22	high
315311	RHEL 10 : NetworkManager (RHSA-2026:18142)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/5/19	low
317434	RockyLinux 9 : NetworkManager (RLSA-2026:18597)	Nessus	Rocky Linux Local Security Checks	2026/5/28	2026/5/28	low
327003	Oracle Linux 10 : NetworkManager (ELSA-2026-18142)	Nessus	Oracle Linux Local Security Checks	2026/7/15	2026/7/15	low
278564	Linux Distros Unpatched Vulnerability : CVE-2025-9615	Nessus	Misc.	2025/12/12	2026/7/25	low
282625	Fedora 42 : NetworkManager-l2tp (2026-0d1cf2e45b)	Nessus	Fedora Local Security Checks	2026/1/12	2026/2/17	low
319944	EulerOS 2.0 SP11 : NetworkManager (EulerOS-SA-2026-2196)	Nessus	Huawei Local Security Checks	2026/6/9	2026/6/9	low
322173	Oracle Linux 9 : NetworkManager (ELSA-2026-18597)	Nessus	Oracle Linux Local Security Checks	2026/6/23	2026/6/23	low

检测

插件搜索

critical

low

low

high

low

high

low

low

low

low

low

low

low