The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:92408 advisory.

    * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)     (CVE-2026-89059)

    * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config     (CVE-2026-89058)

    * com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via     regular expression backtracking (CVE-2026-89407)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_92408 advisory.

    * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)     (CVE-2026-89059)

    * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config     (CVE-2026-89058)

    * com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via     regular expression backtracking (CVE-2026-89407)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_98494 advisory.

    * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)     (CVE-2026-89059)

    * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config     (CVE-2026-89058)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95466 advisory.

    IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure     deployments.  IdM PKI consists of the following components:
      * Certificate Authority (CA)
      * Key Recovery Authority (KRA)
      * Online Certificate Status Protocol (OCSP) Manager
      * Token Key Service (TKS)
      * Token Processing Service (TPS)
      * Automatic Certificate Management Environment (ACME) Responder
      * Enrollment over Secure Transport (EST) Responder

    Security Fix(es):

    * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)     (CVE-2026-89059)

    * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config     (CVE-2026-89058)

    * com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via     regular expression backtracking (CVE-2026-89407)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85234 advisory.

    RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful     Java applications. It is a fully certified and portable implementation of the JAX-RS specification.

    Security Fix(es):

    * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)     (CVE-2026-89059)

    * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config     (CVE-2026-89058)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2106:02 advisory.

    * resteasy-core: RESTEasy: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS)     (CVE-2026-89059)
      * resteasy-core: RESTEasy: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config     (CVE-2026-89058)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
374194	RockyLinux 10 : dogtag-pki (RLSA-2026:92408)	Nessus	Rocky Linux Local Security Checks	2026/10/30	2026/11/2	high
374492	Rocky Linux 10.2 [CIQ] Security Update: dogtag-pki-debugsource / idm-pki-acme / idm-pki-base / idm-pki-ca / etc Multiple Vulnerabilities (crlsa-2026_92408)	Nessus	Rocky Linux Local Security Checks	2026/10/31	2026/11/2	high
379390	Rocky Linux 9 [CIQ] Security Update: pki-resteasy-client / pki-resteasy-core / etc Multiple Vulnerabilities (crlsa-2026_98494)	Nessus	Rocky Linux Local Security Checks	2026/11/12	2026/11/12	high
376898	RHEL 10 : dogtag-pki (RHSA-2026:95466)	Nessus	Red Hat Local Security Checks	2026/11/6	2026/11/9	high
367381	RHEL 9 : resteasy (RHSA-2026:85234)	Nessus	Red Hat Local Security Checks	2026/10/19	2026/10/19	high
369325	MiracleLinux 9 : resteasy-3.0.26-20.el9_8.1 (AXSA:2026-2106:02)	Nessus	Miracle Linux Local Security Checks	2026/10/21	2026/10/21	high

检测

插件搜索

high

high

high

high

high

high