The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21773-1 advisory.

    This update for perl-URI fixes the following issue:

    - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization     in `nameprep`       (bsc#1277886).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:84590 advisory.

    * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode     normalization (CVE-2026-19953)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:84587 advisory.

    * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode     normalization (CVE-2026-19953)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-2026_84590 advisory.

    * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode     normalization (CVE-2026-19953)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84590 advisory.

    This module implements the URI class. Objects of this class represent Uniform Resource Identifier     references as specified in RFC 2396 (and updated by RFC 2732).

    Security Fix(es):

    * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode     normalization (CVE-2026-19953)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-84590 advisory.

    [1.73-4]
    - CVE-2026-19953 perl-URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing     Unicode normalization       incorrect hostname encoding via missing Unicode normalization

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85917 advisory.

    * URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode     normalization (CVE-2026-19953)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3403 advisory.

    URI::_idna::nameprep only lowercased the label and skipped the Unicodenormalization that RFC 3490/3491     require. As a result, a host that wasnot already in NFC encoded to a non-standard A-label that disagrees     withwhat browsers, curl, Go, Java, and Python compute for the same input --and that A-label does not     round-trip. Code that reads $uri->host for asecurity decision (allow/deny lists, SSRF filters, routing,     dedup) couldtherefore disagree with the host that is actually fetched. (CVE-2026-19953)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
343955	openSUSE 16 Security Update : perl-URI (openSUSE-SU-2026:21773-1)	Nessus	SuSE Local Security Checks	2026/9/9	2026/9/9	medium
367293	AlmaLinux 8 : perl-URI (ALSA-2026:84590)	Nessus	Alma Linux Local Security Checks	2026/10/19	2026/10/19	medium
367294	AlmaLinux 10 : perl-URI (ALSA-2026:84587)	Nessus	Alma Linux Local Security Checks	2026/10/19	2026/10/19	medium
369903	Rocky Linux 8 [CIQ] Security Update: perl-URI (crlsa-2026_84590)	Nessus	Rocky Linux Local Security Checks	2026/10/21	2026/10/21	medium
367220	RHEL 8 : perl-URI (RHSA-2026:84590)	Nessus	Red Hat Local Security Checks	2026/10/19	2026/10/25	medium
367323	Oracle Linux 8 : perl-URI (ELSA-2026-84590)	Nessus	Oracle Linux Local Security Checks	2026/10/19	2026/10/19	medium
375296	RockyLinux 8 : perl:5.32 (RLSA-2026:85917)	Nessus	Rocky Linux Local Security Checks	2026/11/2	2026/11/2	medium
377928	Amazon Linux 2023 : perl-URI, perl-URI-tests (ALAS2023-2026-3403)	Nessus	Amazon Linux Local Security Checks	2026/11/9	2026/11/9	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium