The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4458-1 advisory.

    - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write     (bsc#1279893).
    - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054).
    - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053).
    - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms     (bsc#1280052).
    - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF     subject       (bsc#1280051).
    - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in     `pcre2_jit_match`       (bsc#1280050).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:81532 advisory.

    * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions     (CVE-2026-86145)

    * PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback (CVE-2026-89156)

    * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157)

    * pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching (CVE-2026-89160)

    * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158)

    * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161)

    * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:82876 advisory.

    The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for     implementing regular expression pattern matching using the same syntax and semantics as Perl.

    Security Fix(es):

    * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions     (CVE-2026-86145)

    * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161)

    * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:82875 advisory.

    The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for     implementing regular expression pattern matching using the same syntax and semantics as Perl.

    Security Fix(es):

    * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions     (CVE-2026-86145)

    * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161)

    * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4201-1 advisory.

    - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write     (bsc#1279893).
    - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054).
    - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053).
    - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms     (bsc#1280052).
    - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF     subject       (bsc#1280051).
    - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in     `pcre2_jit_match`       (bsc#1280050).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:81532 advisory.

    The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for     implementing regular expression pattern matching using the same syntax and semantics as Perl.

    Security Fix(es):

    * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions     (CVE-2026-86145)

    * PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback (CVE-2026-89156)

    * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157)

    * pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching (CVE-2026-89160)

    * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158)

    * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161)

    * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block,     in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the     same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or     a recursive pattern in conjunction with a small heap limit (this can be set through the API).
    (CVE-2026-86145)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-81613 advisory.

    - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:81613 advisory.

    * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions     (CVE-2026-86145)

    * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157)

    * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158)

    * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_81522 advisory.

    * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions     (CVE-2026-86145)

    * PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback (CVE-2026-89156)

    * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157)

    * pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching (CVE-2026-89160)

    * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158)

    * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161)

    * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the pcre2-10.40-7.el9 build changelog.

  - In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a     context. An incorrect free operation can occur. (CVE-2026-89161)

  - PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker     can provide a large pattern. (CVE-2026-89157)

  - PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block,     in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the     same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or     a recursive pattern in conjunction with a small heap limit (this can be set through the API).
    (CVE-2026-86145)

  - PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide     invalid UTF data. (CVE-2026-89156)

  - PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-     bounds write. (CVE-2026-89158)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:81522 advisory.

    The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for     implementing regular expression pattern matching using the same syntax and semantics as Perl.

    Security Fix(es):

    * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions     (CVE-2026-86145)

    * PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback (CVE-2026-89156)

    * pcre2: PCRE2: Out-of-bounds write via large pattern input (CVE-2026-89157)

    * pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching (CVE-2026-89160)

    * PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms (CVE-2026-89158)

    * pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match (CVE-2026-89161)

    * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92899 advisory.

    The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for     implementing regular expression pattern matching using the same syntax and semantics as Perl.

    Security Fix(es):

    * pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions     (CVE-2026-86145)

    * pcre2: pcre2: Out-of-bounds write via crafted regular expression (CVE-2026-103111)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e9c6062c07 advisory.

    Update to pcre-10.48


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
363095	SUSE SLES15: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix2 / etc (SUSE-SU-2026:4458-1)	Nessus	SuSE Local Security Checks	2026/10/6	2026/10/6	high
365539	RockyLinux 9 : pcre2 (RLSA-2026:81532)	Nessus	Rocky Linux Local Security Checks	2026/10/14	2026/10/14	high
365580	RHEL 9 : pcre2 (RHSA-2026:82876)	Nessus	Red Hat Local Security Checks	2026/10/14	2026/10/14	high
365906	RHEL 9 : pcre2 (RHSA-2026:82875)	Nessus	Red Hat Local Security Checks	2026/10/14	2026/10/14	high
346792	SUSE SLES12: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix2 / etc (SUSE-SU-2026:4201-1)	Nessus	SuSE Local Security Checks	2026/9/17	2026/9/17	high
369249	RHEL 9 : pcre2 (RHSA-2026:81532)	Nessus	Red Hat Local Security Checks	2026/10/21	2026/10/21	high
343097	Linux Distros Unpatched Vulnerability : CVE-2026-86145	Nessus	Misc.	2026/9/5	2026/10/29	high
365479	Oracle Linux 8 : pcre2 (ELSA-2026-81613)	Nessus	Oracle Linux Local Security Checks	2026/10/13	2026/10/13	high
365536	RockyLinux 8 : pcre2 (RLSA-2026:81613)	Nessus	Rocky Linux Local Security Checks	2026/10/14	2026/10/14	high
366075	Rocky Linux 10.2 [CIQ] Security Update: pcre2 / pcre2-debuginfo / pcre2-debugsource / pcre2-devel / etc Multiple Vulnerabilities (crlsa-2026_81522)	Nessus	Rocky Linux Local Security Checks	2026/10/15	2026/10/15	high
363462	CentOS 9 : pcre2-10.40-7.el9	Nessus	CentOS Local Security Checks	2026/10/6	2026/10/6	high
369247	RHEL 10 : pcre2 (RHSA-2026:81522)	Nessus	Red Hat Local Security Checks	2026/10/21	2026/10/21	high
373958	RHEL 8 : pcre2 (RHSA-2026:92899)	Nessus	Red Hat Local Security Checks	2026/10/30	2026/10/30	high
349621	Fedora 44 : mingw-pcre2 (2026-e9c6062c07)	Nessus	Fedora Local Security Checks	2026/9/24	2026/9/24	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high