The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:2752-1 advisory.

    This update for python3-lxml fixes the following issue

    - CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read (bsc#1263254).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the     two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read     local files. Setting the resolve_entities option explicitly to resolve_entities='internal' or     resolve_entities=False disables the local file access. This vulnerability is fixed in     6.1.0.(CVE-2026-41066)

Tenable has extracted the preceding description block directly from the EulerOS python-lxml security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the     two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read     local files. Setting the resolve_entities option explicitly to resolve_entities='internal' or     resolve_entities=False disables the local file access. This vulnerability is fixed in     6.1.0.(CVE-2026-41066)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization python-lxml security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the  package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the     two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read     local files. Setting the resolve_entities option explicitly to resolve_entities='internal' or     resolve_entities=False disables the local file access. This vulnerability is fixed in     6.1.0.(CVE-2026-41066)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021468 advisory.

    lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the     two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read     local files. Setting the resolve_entities option explicitly to resolve_entities='internal' or     resolve_entities=False disables the local file access. This vulnerability is fixed in 6.1.0.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the python3 package has been released.

According to the versions of the python-lxml packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the     two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read     local files. Setting the resolve_entities option explicitly to resolve_entities='internal' or     resolve_entities=False disables the local file access. This vulnerability is fixed in     6.1.0.(CVE-2026-41066)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization python-lxml security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:2728-1 advisory.

    This update for python-lxml fixes the following issue

    - CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
325378	SUSE SLES12 Security Update : python3-lxml (SUSE-SU-2026:2752-1)	Nessus	SuSE Local Security Checks	2026/7/7	2026/7/7	high
326124	EulerOS 2.0 SP12 : python-lxml (EulerOS-SA-2026-2558)	Nessus	Huawei Local Security Checks	2026/7/10	2026/7/10	high
326613	EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2026-2667)	Nessus	Huawei Local Security Checks	2026/7/14	2026/7/14	high
328595	EulerOS Virtualization 2.10.1 : python-lxml (EulerOS-SA-2026-2834)	Nessus	Huawei Local Security Checks	2026/7/21	2026/7/21	high
328605	EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2750)	Nessus	Huawei Local Security Checks	2026/7/21	2026/7/21	high
332918	EulerOS 2.0 SP13 : python-lxml (EulerOS-SA-2026-3040)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	high
333417	EulerOS 2.0 SP11 : python-lxml (EulerOS-SA-2026-3092)	Nessus	Huawei Local Security Checks	2026/8/8	2026/8/8	high
333460	EulerOS 2.0 SP11 : python-lxml (EulerOS-SA-2026-3146)	Nessus	Huawei Local Security Checks	2026/8/8	2026/8/8	high
377239	EulerOS Virtualization 2.15.0 : python-lxml (EulerOS-SA-2026-4721)	Nessus	Huawei Local Security Checks	2026/11/7	2026/11/7	high
315155	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-lxml (UTSA-2026-021468)	Nessus	Unity Linux Local Security Checks	2026/5/18	2026/5/18	high
321579	Photon OS 5.0: Python3 PHSA-2026-5.0-0882	Nessus	PhotonOS Local Security Checks	2026/6/20	2026/10/14	high
332822	EulerOS 2.0 SP15 : python-lxml (EulerOS-SA-2026-2942)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	high
332836	EulerOS 2.0 SP15 : python-lxml (EulerOS-SA-2026-2901)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	high
332962	EulerOS 2.0 SP13 : python-lxml (EulerOS-SA-2026-2990)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	high
348064	EulerOS Virtualization 2.11.1 : python-lxml (EulerOS-SA-2026-3462)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	high
325026	SUSE SLES12 Security Update : python-lxml (SUSE-SU-2026:2728-1)	Nessus	SuSE Local Security Checks	2026/7/3	2026/7/3	high
377211	EulerOS Virtualization 2.15.1 : python-lxml (EulerOS-SA-2026-4663)	Nessus	Huawei Local Security Checks	2026/11/7	2026/11/7	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high