The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58952 advisory.

    * urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure     (CVE-2026-9323)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58952 advisory.

    - Fix CVE-2026-9323: use cryptographically secure session identifiers       in web display module

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57637 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure     (CVE-2026-9323)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1663:02 advisory.

    * urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure     (CVE-2026-9323)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in     Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG,     which is not cryptographically secure. Each call consumes approximately 30 bits of PRNG state, and the     Mersenne Twister internal state is approximately 19,937 bits, so an attacker who observes approximately     334 session IDs (for example via the X-Urwid-ID HTTP response header) can fully reconstruct the internal     state and predict all past and future session IDs (Path B). The same identifier is also used as the     filename of a FIFO created in the world-listable /tmp directory (for example     /tmp/urwid375487765176907690.in), so any local user on the host can list /tmp to enumerate active session     tokens directly (Path A). With a valid session ID, an attacker can read the victim's terminal screen via     the polling endpoint, inject keystrokes into the victim's session (yielding OS-level code execution with     the session owner's privileges if the session runs a shell), and inject exit sequences or flood the FIFO     to terminate or crash the session. A prior Bandit S311 warning on this usage was suppressed with # noqa:
    S311 rather than fixed (CVE-2026-9323)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58562 advisory.

    * urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure     (CVE-2026-9323)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:58562 advisory.

    * urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure     (CVE-2026-9323)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57638 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure     (CVE-2026-9323)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2049 advisory.

    The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in     Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG,     which is not cryptographically secure. Each call consumes approximately 30 bits of PRNG state, and the     Mersenne Twister internal state is approximately 19,937 bits, so an attacker who observes approximately     334 session IDs (for example via the X-Urwid-ID HTTP response header) can fully reconstruct the internal     state and predict all past and future session IDs (Path B). The same identifier is also used as the     filename of a FIFO created in the world-listable /tmp directory (for example     /tmp/urwid375487765176907690.in), so any local user on the host can list /tmp to enumerate active session     tokens directly (Path A). With a valid session ID, an attacker can read the victim's terminal screen via     the polling endpoint, inject keystrokes into the victim's session (yielding OS-level code execution with     the session owner's privileges if the session runs a shell), and inject exit sequences or flood the FIFO     to terminate or crash the session. A prior Bandit S311 warning on this usage was suppressed with # noqa:
    S311 rather than fixed (CVE-2026-9323)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4780 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4780-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Abhijith PA     September 15, 2026                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : urwid     Version        : 2.1.2-4+deb12u1     CVE ID         : CVE-2026-9323


    The urwid web display backend generates web session identifiers by     concatenating two random.randrange(10**9) calls that use Python's     Mersenne Twister PRNG, which is not cryptographically secure. The same     identifier is also used as the filename of a FIFO created in the     world-listable /tmp directory, so any local user on the host can list     /tmp to enumerate active session tokens directly. With a valid session     ID, an attacker can read the victim's terminal screen via the polling     endpoint, inject keystrokes into the victim's session, and inject exit     sequences or flood the FIFO to terminate or crash the session.

    For Debian 12 bookworm, this problem has been fixed in version     2.1.2-4+deb12u1.

    We recommend that you upgrade your urwid packages.

    For the detailed security status of urwid please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/urwid

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
339422	RockyLinux 9 : python-urwid (RLSA-2026:58952)	Nessus	Rocky Linux Local Security Checks	2026/8/25	2026/8/28	critical
339500	Oracle Linux 9 : python-urwid (ELSA-2026-58952)	Nessus	Oracle Linux Local Security Checks	2026/8/25	2026/8/28	critical
338420	RHEL 8 : python-urwid (RHSA-2026:57637)	Nessus	Red Hat Local Security Checks	2026/8/20	2026/8/28	critical
339931	MiracleLinux 9 : python-urwid-2.1.2-4.el9_8.1 (AXSA:2026-1663:02)	Nessus	Miracle Linux Local Security Checks	2026/8/26	2026/8/28	critical
327792	Linux Distros Unpatched Vulnerability : CVE-2026-9323	Nessus	Misc.	2026/7/18	2026/9/16	critical
339146	RockyLinux 8 : python-urwid (RLSA-2026:58562)	Nessus	Rocky Linux Local Security Checks	2026/8/24	2026/8/28	critical
339391	AlmaLinux 8 : python-urwid (ALSA-2026:58562)	Nessus	Alma Linux Local Security Checks	2026/8/25	2026/8/28	critical
338421	RHEL 8 : python-urwid (RHSA-2026:57638)	Nessus	Red Hat Local Security Checks	2026/8/20	2026/8/28	critical
337234	Amazon Linux 2023 : python3-urwid (ALAS2023-2026-2049)	Nessus	Amazon Linux Local Security Checks	2026/8/18	2026/8/28	critical
345820	Debian dla-4780 : python-urwid-doc - security update	Nessus	Debian Local Security Checks	2026/9/15	2026/9/15	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical