The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:92428 advisory.

    * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 [rhel-10.2.z] (JIRA:Rocky Linux-291718)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:92420 advisory.

    * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 (JIRA:Rocky Linux-291714)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_92420 advisory.

    * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 (JIRA:Rocky Linux-291714)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:92428 advisory.

    * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)
      * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)


    Bug Fix(es) and Enhancement(s):

      * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 [rhel-10.2.z] (JIRA:RHEL-291718)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_92492 advisory.

    * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 [rhel-9.8.z] (JIRA:Rocky Linux-291717)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:92431 advisory.

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 10.0 to SDK 10.0.114 and Runtime 10.0.14 (JIRA:Rocky Linux-291741)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_92431 advisory.

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 10.0 to SDK 10.0.114 and Runtime 10.0.14 (JIRA:Rocky Linux-291741)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:92430 advisory.

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 9.0 to SDK 9.0.123 and Runtime 9.0.22 [rhel-10.2.z] (JIRA:Rocky Linux-291728)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-92432 advisory.

    [10.0.114-1.0.1]
    - Add support for Oracle Linux

    [10.0.114-1]
    - Update to .NET SDK 10.0.114 and Runtime 10.0.14
    - Resolves: RHEL-291744

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92511 advisory.

    .NET is a fast, lightweight and modular platform for creating cross platform applications that work on     Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and     micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK     containing compilers and a 'dotnet' application to drive everything.

    SDK version: 11.0.100~rc.3.26522.148     Runtime version: 11.0.0~rc.3.26522.148

    Security Fix(es):

    * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909)

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 11 to RC 1 (JIRA:RHEL-260220)

    * Update .NET 11 to RC 2 (JIRA:RHEL-276919)

    * Update .NET 11 to RC 3 (JIRA:RHEL-292372)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92430 advisory.

    .NET is a fast, lightweight and modular platform for creating cross platform applications that work on     Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and     micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK     containing compilers and a 'dotnet' application to drive everything.

    SDK version: 9.0.123     Runtime version: 9.0.22

    Security Fix(es):

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 9.0 to SDK 9.0.123 and Runtime 9.0.22 [rhel-10.2.z] (JIRA:RHEL-291728)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_92428 advisory.

    * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 [rhel-10.2.z] (JIRA:Rocky Linux-291718)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92420 advisory.

    .NET is a fast, lightweight and modular platform for creating cross platform applications that work on     Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and     micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK     containing compilers and a 'dotnet' application to drive everything.

    SDK version: 8.0.133     Runtime version: 8.0.33

    Security Fix(es):

    * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)

    * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

    Bug Fix(es) and Enhancement(s):

    * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 (JIRA:RHEL-291714)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2268:23 advisory.

    * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)
      * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability     (CVE-2026-114148)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-094b09b38e advisory.

    Update to .NET SDK 11.0.100-rc.3.26522.148 and Runtime 11.0.0-rc.3.26522.148

    Fixes: CVE-2026-102870, CVE-2026-105016, CVE-2026-111497, CVE-2026-114148, CVE-2026-58280, CVE-2026-66822,     CVE-2026-69651, CVE-2026-70007, CVE-2026-70035, CVE-2026-70159, CVE-2026-70161, CVE-2026-70162,     CVE-2026-70165, CVE-2026-70174, CVE-2026-70183, CVE-2026-70188, CVE-2026-70190, CVE-2026-70194,     CVE-2026-70197, CVE-2026-83520, CVE-2026-84008, CVE-2026-85363, CVE-2026-85790, CVE-2026-87697,     CVE-2026-88092, CVE-2026-92707, CVE-2026-96224, CVE-2026-96225, CVE-2026-96229, CVE-2026-96230,     CVE-2026-96231, CVE-2026-96232, CVE-2026-96233, CVE-2026-96234, CVE-2026-96235, CVE-2026-96236,     CVE-2026-96238, CVE-2026-96957, CVE-2026-96958, CVE-2026-96959, CVE-2026-96960

    Release Notes:
    - SDK: https://github.com/dotnet/core/blob/main/release-     notes/11.0/11.0.0-rc.2.26504.105/11.0.100-rc.2.26504.105.md
    - SDK: https://github.com/dotnet/core/blob/main/release-     notes/11.0/11.0.0-rc.3.26522.148/11.0.100-rc.3.26522.148.md
    - Runtime: https://github.com/dotnet/core/blob/main/release-     notes/11.0/11.0.0-rc.2.26504.105/11.0.0-rc.2.26504.105.md
    - Runtime: https://github.com/dotnet/core/blob/main/release-     notes/11.0/11.0.0-rc.3.26522.148/11.0.0-rc.3.26522.148.md

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
374400	RockyLinux 10 : .NET 8.0 (RLSA-2026:92428)	Nessus	Rocky Linux Local Security Checks	2026/10/30	2026/11/2	critical
374403	RockyLinux 8 : .NET 8.0 (RLSA-2026:92420)	Nessus	Rocky Linux Local Security Checks	2026/10/30	2026/11/2	critical
374497	Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_92420)	Nessus	Rocky Linux Local Security Checks	2026/10/31	2026/11/2	critical
374540	AlmaLinux 10 : .NET 8.0 (ALSA-2026:92428)	Nessus	Alma Linux Local Security Checks	2026/10/31	2026/11/2	critical
374788	Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_92492)	Nessus	Rocky Linux Local Security Checks	2026/11/1	2026/11/2	critical
374402	RockyLinux 8 : .NET 10.0 (RLSA-2026:92431)	Nessus	Rocky Linux Local Security Checks	2026/10/30	2026/10/30	high
374521	Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc (crlsa-2026_92431)	Nessus	Rocky Linux Local Security Checks	2026/10/31	2026/10/31	high
374548	RockyLinux 10 : .NET 9.0 (RLSA-2026:92430)	Nessus	Rocky Linux Local Security Checks	2026/10/31	2026/10/31	high
375180	Oracle Linux 9 : .NET / 10.0 (ELSA-2026-92432)	Nessus	Oracle Linux Local Security Checks	2026/11/2	2026/11/2	high
376461	RHEL 8 : .NET 11.0 (RHSA-2026:92511)	Nessus	Red Hat Local Security Checks	2026/11/5	2026/11/5	high
376462	RHEL 10 : .NET 9.0 (RHSA-2026:92430)	Nessus	Red Hat Local Security Checks	2026/11/5	2026/11/5	high
374501	Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_92428)	Nessus	Rocky Linux Local Security Checks	2026/10/31	2026/11/2	critical
376459	RHEL 8 : .NET 8.0 (RHSA-2026:92420)	Nessus	Red Hat Local Security Checks	2026/11/5	2026/11/6	critical
376805	MiracleLinux 9 : dotnet8.0-8.0.133-1.el9_8.ML.1 (AXSA:2026-2268:23)	Nessus	Miracle Linux Local Security Checks	2026/11/6	2026/11/9	critical
378697	Fedora 44 : dotnet11.0 (2026-094b09b38e)	Nessus	Fedora Local Security Checks	2026/11/11	2026/11/12	critical

检测

插件搜索

critical

critical

critical

critical

critical

high

high

high

high

high

high

critical

critical

critical

critical