According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding     protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this     vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.(CVE-2026-7210)

    tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or     directory-like names, to redirect later archive members outside the intended extraction directory. This     allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination     directory, subject to the permissions of the extracting process.(CVE-2026-7774)

    tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a     hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback     validated the symlink at its archived location but recreated it at the hardlink's shallower path, letting     a relative target the filter judged contained escape the destination directory. This allowed a malicious     tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads     or writes. This was an incomplete fix of CVE-2025-4330.(CVE-2026-11940)

    When an Expat parser with a registered ElementDeclHandler parses an inline document type definition     containing a deeply nested content model a C stack overflow occurs.(CVE-2026-4224)

    http.cookies.Morsel.js_output() returns an inline script snippet and only escapes ' for JavaScript     string context. It does not neutralize the HTML parser-sensitive sequence /script inside the     generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie     value.(CVE-2026-6019)

    Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and     `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-     used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the     dangling pointer in this specific error condition.The vulnerability is only present if the program re-uses     decompressor instances across multiple decompression calls even after a `MemoryError` is raised during     decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`,     `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor     instance is used per call. If the decompressor instance is not re-used after an error condition, this     usage is similarly not vulnerable.(CVE-2026-6100)

    The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line     options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize     URLs prior to passing to  webbrowser.open().(CVE-2026-4519)

    bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the     resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to     resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash     the process when processing untrusted data.(CVE-2026-9669)

    The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled     in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers     for this audit event therefore do not fire.(CVE-2026-2297)

    The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The     Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass     input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to     BaseCookie.output().(CVE-2026-3644)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization python3 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1963 advisory.

    When using the configparser module to write configuration filescontaining multi-line text values with     carriage return characters (\r) theresulting file could be injected with unexpected keys and values if     theattacker controls the written value. (CVE-2026-0864)

    tarfile.extractall() with the 'data' or 'tar'filter could be bypassed by a crafted archive where a     hardlinkreferences a symlink stored at a deeper name than the hardlink itself.The extraction fallback     validated the symlink at it's archived locationbut recreated it at the hardlink's shallowerpath, letting a     relativetarget the filter judged contained escape the destination directory.This allowed a malicious tar     archive to create a symlink pointingoutside the destination, enabling out-of-destination file reads     orwrites. This was an incomplete fix of CVE-2025-4330. (CVE-2026-11940)

    When using the tarfile module with a file opened in streaming mode (mode=r|) the tarfile module did     not properly handle EOF, making archive parsing take exponentially longer. (CVE-2026-11972)

    unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input     containing long runs of combining characters with alternating Canonical Combining Class values. This     affects all normalization forms. (CVE-2026-3276)

    bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the     resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to     resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash     the process when processing untrusted data. (CVE-2026-9669)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3548-1 advisory.

    Security issues fixed:

    - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when     the       `configparser` module is used (bsc#1269066).
    - CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing     specially crafted       Unicode input (bsc#1267581).
    - CVE-2026-4360: in the `Tarfile.extract()` function, the filter parameter is not passed properly when     extracting       hardlinks (bsc#1269959).
    - CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-     flooding       protection (bsc#1264962).
    - CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction     directory       (bsc#1267821).
    - CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address     (bsc#1265268).
    - CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination     directory and       enables arbitrary file reads and writes (bsc#1268977).
    - CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead     to DoS       (bsc#1269788).
    - CVE-2026-15308: incremental `HTMLParser` allows CPU-exhaustion DoS via repeated unterminated markup     declarations       (bsc#1271192).

    Non security issue fixed:

    - Improve testing for the support of `IPPROTO_UDPLITE`, which could be not present although header files     are       (bsc#1268375).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:54268 advisory.

    * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory     (CVE-2026-11940)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:56219 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory     (CVE-2026-11940)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7f32bbb5b0 advisory.

    Update to Python 3.14.7


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:56219 advisory.

    * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory     (CVE-2026-11940)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21595-1 advisory.

    - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines     (bsc#1257044).
    - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#1257041).
    - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when     the       `configparser` module is used (bsc#1269066).
    - CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when     extracting       hardlinks (bsc#1269959).
    - CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address     (bsc#1265268).
    - CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination     directory and       enables arbitrary file reads and writes (bsc#1268977).
    - CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead     to DoS       (bsc#1269788).
    - CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup     declarations       (bsc#1271192).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1621:07 advisory.

    * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory     (CVE-2026-11940)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:58971 advisory.

    * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory     (CVE-2026-11940)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-58901 advisory.

    - Update to Python 3.14.7, security fix for CVE-2026-11940     Resolves: RHEL-227218

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1652:10 advisory.

    * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory     (CVE-2026-11940)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:63024 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory     (CVE-2026-11940)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0989 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-11940:
    tarfile.extractall() with the 'data' or 'tar'      filter could be bypassed by a crafted archive where a hardlink     references a symlink stored at a deeper name than the hardlink itself.
    The extraction fallback validated the symlink at it's archived location     but recreated it at the hardlink's shallower     path, letting a relative      target the filter judged contained escape the destination directory.
    This allowed a malicious tar archive to create a symlink pointing     outside the destination, enabling out-of-destination file reads or     writes. This was an incomplete fix of CVE-2025-4330.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
347223	EulerOS Virtualization 2.12.1 : python3 (EulerOS-SA-2026-3609)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	critical
328474	Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1963)	Nessus	Amazon Linux Local Security Checks	2026/7/20	2026/7/20	high
334781	SUSE SLES15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:3548-1)	Nessus	SuSE Local Security Checks	2026/8/12	2026/9/3	high
335121	RockyLinux 9 : python3.9 (RLSA-2026:54268)	Nessus	Rocky Linux Local Security Checks	2026/8/13	2026/8/13	high
337670	RHEL 8 : python3 (RHSA-2026:56219)	Nessus	Red Hat Local Security Checks	2026/8/18	2026/8/18	high
338000	Fedora 43 : python3.14 (2026-7f32bbb5b0)	Nessus	Fedora Local Security Checks	2026/8/19	2026/9/3	high
338005	RockyLinux 8 : python3 (RLSA-2026:56219)	Nessus	Rocky Linux Local Security Checks	2026/8/19	2026/8/19	high
338682	openSUSE 16: libpython3_13-1_0 / libpython3_13-1_0-x86-64-v3 / libpython3_13t1_0 / etc (openSUSE-SU-2026:21595-1)	Nessus	SuSE Local Security Checks	2026/8/21	2026/9/3	high
339025	MiracleLinux 9 : python3.9-3.9.25-7.el9_8.3 (AXSA:2026-1621:07)	Nessus	Miracle Linux Local Security Checks	2026/8/23	2026/8/23	high
339395	AlmaLinux 8 : python3.12 (ALSA-2026:58971)	Nessus	Alma Linux Local Security Checks	2026/8/25	2026/8/25	high
339493	Oracle Linux 9 : python3.14 (ELSA-2026-58901)	Nessus	Oracle Linux Local Security Checks	2026/8/25	2026/8/25	high
339652	MiracleLinux 8 : python3-3.6.8-78.el8_10.ML.1 (AXSA:2026-1652:10)	Nessus	Miracle Linux Local Security Checks	2026/8/26	2026/8/26	high
342649	RHEL 10 : python3.12 (RHSA-2026:63024)	Nessus	Red Hat Local Security Checks	2026/9/3	2026/9/3	high
344398	TencentOS Server 3: python3.12 (TSSA-2026:0989)	Nessus	Tencent Local Security Checks	2026/9/9	2026/9/9	high

检测

插件搜索

critical

high

high

high

high

high

high

high

high

high

high

high

high

high