The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7ac0f35a-7aeb-11f1-a315-589cfc10a551 advisory.

    X.Org project reports:
    Multiple issues have been found in the X server and Xwayland                  implementations published by X.Org for which we are releasing                  security fixes for in xorg-server-21.1.24 and xwayland-24.1.13.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0211 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-55999:
    Local attackers with a X connection able to provide PCX fonts to the X     server xorg-server before 21.2.24 and xwayland before 24.1.13 could     cause a heap buffer overflow via SetFont due to missing glyph boundary checks.

    CVE-2026-56000:
    Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24     and xwayland before 24.1.13 could cause a Heap Use After Free, due toCommonMakeCurrent() pointing into     potentially reallocated memory.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6a00d3109f advisory.

    Update to xwayland 24.1.13, fixes for: CVE-2026-55999, CVE-2026-56000

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_38490 advisory.

    * xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow (CVE-2026-55999)

    * X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() (CVE-2026-56000)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784219693 advisory.

  - Local attackers with a X connection able to provide PCX fonts to the X server xorg-server before 21.2.24     and xwayland before 24.1.13 could cause a heap buffer overflow via SetFont due to missing glyph boundary     checks. (CVE-2026-55999)

  - Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24     and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into     potentially reallocated memory. (CVE-2026-56000)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38489 advisory.

    [24.1.9-4.3]
    - CVE fix for: CVE-2026-55999, CVE-2026-56000       Resolves: https://redhat.atlassian.net/browse/RHEL-191518       Resolves: https://redhat.atlassian.net/browse/RHEL-191517

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38490 advisory.

    [24.1.9-4.3]
    - CVE fix for: CVE-2026-55999, CVE-2026-56000       Resolves: https://redhat.atlassian.net/browse/RHEL-191532       Resolves: https://redhat.atlassian.net/browse/RHEL-191524

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202608-14 (X.Org X server, XWayland: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in X.Org X server, XWayland. Please review the CVE     identifiers referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
325980	FreeBSD : xwayland -- Multiple vulnerabilities (7ac0f35a-7aeb-11f1-a315-589cfc10a551)	Nessus	FreeBSD Local Security Checks	2026/7/9	2026/7/15	critical
329118	Alibaba Cloud Linux 3 : 0211: xorg-x11-server-Xwayland (ALINUX3-SA-2026:0211)	Nessus	Alibaba Cloud Linux Local Security Checks	2026/7/23	2026/7/23	critical
326410	Fedora 43 : xorg-x11-server-Xwayland (2026-6a00d3109f)	Nessus	Fedora Local Security Checks	2026/7/12	2026/7/15	critical
358656	Rocky Linux 9 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_38490)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
360740	AlmaLinux 9.6 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784219693)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	critical
342254	Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-38489)	Nessus	Oracle Linux Local Security Checks	2026/9/1	2026/9/1	critical
342288	Oracle Linux 9 : xorg-x11-server-Xwayland (ELSA-2026-38490)	Nessus	Oracle Linux Local Security Checks	2026/9/2	2026/9/2	critical
337634	GLSA-202608-14 : X.Org X server, XWayland: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2026/8/18	2026/8/18	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical