It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3113 advisory.

    Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
    (CVE-2026-58649)

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
    (CVE-2026-62886)

    External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a     network. (CVE-2026-69805)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities:

  - Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
    (CVE-2026-62886)

  - Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
    (CVE-2026-69522)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3114 advisory.

    Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
    (CVE-2026-58649)

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
    (CVE-2026-62886)

    External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a     network. (CVE-2026-69805)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1397d83d94 advisory.

    Update to .NET SDK 8.0.130 and Runtime 8.0.30

    Fixes: CVE-2026-62871,CVE-2026-62886,CVE-2026-62897,CVE-2026-62898,CVE-2026-62899,CVE-2026-62900,CVE-2026-     62901,CVE-2026-62902,CVE-2026-62909,CVE-2026-70354

    Release Notes:

    - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.30/8.0.130.md
    - Runtime: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.30/8.0.30.md

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9c8770dffb advisory.

    Update to .NET SDK 9.0.120 and Runtime 9.0.19

    Fixes: CVE-2026-62871,CVE-2026-62886,CVE-2026-62897,CVE-2026-62898,CVE-2026-62899,CVE-2026-62900,CVE-2026-     62901,CVE-2026-62902,CVE-2026-62909,CVE-2026-70354

    Release Notes:

    - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.120.md
    - Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.19/9.0.19.md

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the dotnet package has been released.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3111 advisory.

    Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
    (CVE-2026-58649)

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
    (CVE-2026-62886)

    External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a     network. (CVE-2026-69805)

    Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to     elevate privileges locally. (CVE-2026-69806)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
373049	Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-3113)	Nessus	Amazon Linux Local Security Checks	2026/10/28	2026/10/28	high
344819	Microsoft .NET Framework (September 2026)	Nessus	Windows : Microsoft Bulletins	2026/9/11	2026/9/14	high
351060	Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3114)	Nessus	Amazon Linux Local Security Checks	2026/9/29	2026/10/28	high
338612	Fedora 44 : dotnet8.0 (2026-1397d83d94)	Nessus	Fedora Local Security Checks	2026/8/21	2026/8/21	high
338613	Fedora 43 : dotnet9.0 (2026-9c8770dffb)	Nessus	Fedora Local Security Checks	2026/8/21	2026/8/21	high
337072	Photon OS 5.0: Dotnet PHSA-2026-5.0-92-0961	Nessus	PhotonOS Local Security Checks	2026/8/18	2026/11/2	critical
373050	Amazon Linux 2023 : aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0 (ALAS2023-2026-3111)	Nessus	Amazon Linux Local Security Checks	2026/10/28	2026/10/28	high

检测

插件搜索

high

high

high

high

high

critical

high