The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36203 advisory.

    - Backport several CVE fixes (CVE-2026-40033, CVE-2026-44420, CVE-2026-44421,       CVE-2026-44422, CVE-2026-45700)       Resolves: RHEL-186978, RHEL-186967, RHEL-186958, RHEL-186950, RHEL-186093
    - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952)       Resolves: RHEL-159848
    - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
    - Fix clipboard use-after-free during auto-reconnect (CVE-2026-25997)
    - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
    - Add DSP format checks (CVE-2026-31884)
    - Fix DSP array bounds checks (CVE-2026-31883)
    - Fix DSP array bounds checks (CVE-2026-31885)
    - Update PERSISTENT_CACHE_ENTRY::size after realloc (CVE-2026-33987)
    - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:36203 advisory.

    * freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdi_CacheToSurface (CVE-2026-40033)
      * freerdp: FreeRDP: Arbitrary code execution or denial of service via heap use-after-free in RDPEAR NDR     parser (CVE-2026-44422)
      * freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution     (CVE-2026-45700)
      * freerdp: FreeRDP: Arbitrary code execution via crafted RDPGFX PDUs (CVE-2026-44421)
      * freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow     (CVE-2026-44420)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0214 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-45700:
    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap     decoder has an out-of-bounds heap write when decoding RLE planar data. In libfreerdp/codec/planar.c,     freerdp_bitmap_decompress_planar() validates the X destination coordinate nXDst against the caller-     provided destination stride (nDstStep) even when it is writing into the internal temp buffer pTempData. An     attacker can bypass the check with a large nDstStep and a large nXDst, causing     planar_decompress_plane_rle() to write past the end of pTempData. This vulnerability is fixed in 3.26.0.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47049 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
    The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

    Security Fix(es):

    * freerdp: FreeRDP: Out-of-bounds write in planar bitmap decoder allows arbitrary code execution     (CVE-2026-45700)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
328752	Oracle Linux 10 : freerdp (ELSA-2026-36203)	Nessus	Oracle Linux Local Security Checks	2026/7/21	2026/7/21	high
328794	AlmaLinux 10 : freerdp (ALSA-2026:36203)	Nessus	Alma Linux Local Security Checks	2026/7/21	2026/7/21	high
329120	Alibaba Cloud Linux 3 : 0214: freerdp (ALINUX3-SA-2026:0214)	Nessus	Alibaba Cloud Linux Local Security Checks	2026/7/23	2026/7/23	high
330345	RHEL 9 : freerdp (RHSA-2026:47049)	Nessus	Red Hat Local Security Checks	2026/7/28	2026/7/28	high

检测

插件搜索

high

high

high

high