The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59220 advisory.

    * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)

    * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59490 advisory.

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency,     performance, and low memory usage.

    Security Fix(es):

    * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)

    * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59496 advisory.

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency,     performance, and low memory usage.

    Security Fix(es):

    * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)

    * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59496 advisory.

    * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)

    * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59490 advisory.

    - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory       modification or denial of service (CVE-2026-56434)
    - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service       in ngx_http_slice_module (CVE-2026-60005)
    - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or.
      Denial of Service via heap-based buffer overflow with crafted HTTP/2       headers (CVE-2026-42055)
    - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial       of service (CVE-2026-9256)
    - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution       Vulnerability (CVE-2026-42945)
    - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of       Service or Code Execution via specially crafted MP4 files
    - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of       Service via undisclosed requests when ngx_mail_auth_http_module is enabled
    - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of       Service or file modification via buffer overflow in ngx_http_dav_module
    - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of       Service due to memory corruption via crafted MP4 file
    - Resolves: RHEL-146529 -  CVE-2026-1642 nginx: NGINX: Data injection via       man-in-the-middle attack on TLS proxied connections

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59362 advisory.

    - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory       modification or denial of service (CVE-2026-56434)
    - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service       in ngx_http_slice_module (CVE-2026-60005)
    - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or       Denial of Service via heap-based buffer overflow with crafted HTTP/2       headers (CVE-2026-42055)
    - Resolves: RHEL-178684 - nginx: code execution and denial of       service (CVE-2026-9256)
    - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution       Vulnerability (CVE-2026-42945)
    - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in     ngx_http_dav_module
    - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file
    - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when     ngx_mail_auth_http_module is enabled

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:93472 advisory.

    nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency,     performance, and low memory usage.

    Security Fix(es):

    * nginx: ngx_http_rewrite_module: code execution and denial of service (CVE-2026-9256)

    * nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted     HTTP/2 headers (CVE-2026-42055)

    * nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)

    * nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533)

    * nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its Server response header, the installed version of nginx is 0.8.11 prior to 1.30.4 or 1.31.x prior to 1.31.3. It is, therefore, affected by the following issue :

  - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This     vulnerability may exist when the Server-Side Includes (SSI), proxy_pass, and proxy_buffering off     directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle     (MITM) ability to control responses from an upstream server may be able to cause a use-after-free in the     NGINX worker process. This issue may lead to limited modification of memory or a restart of the NGINX     worker process. Impact: This vulnerability may allow remote attackers to have limited control to modify     memory contents or restart the NGINX worker process. There is no control plane exposure; this is a data     plane issue only. (CVE-2026-56434)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
339427	RockyLinux 10 : nginx (RLSA-2026:59220)	Nessus	Rocky Linux Local Security Checks	2026/8/25	2026/8/25	high
339466	RHEL 9 : nginx:1.24 (RHSA-2026:59490)	Nessus	Red Hat Local Security Checks	2026/8/25	2026/8/25	high
339540	RHEL 9 : nginx:1.26 (RHSA-2026:59496)	Nessus	Red Hat Local Security Checks	2026/8/25	2026/8/25	high
339687	RockyLinux 9 : nginx:1.26 (RLSA-2026:59496)	Nessus	Rocky Linux Local Security Checks	2026/8/26	2026/8/26	high
342530	Oracle Linux 9 : nginx:1.24 (ELSA-2026-59490)	Nessus	Oracle Linux Local Security Checks	2026/9/3	2026/9/3	high
342814	Oracle Linux 9 : nginx (ELSA-2026-59362)	Nessus	Oracle Linux Local Security Checks	2026/9/4	2026/9/4	high
374926	RHEL 9 : nginx (RHSA-2026:93472)	Nessus	Red Hat Local Security Checks	2026/11/2	2026/11/3	critical
375492	nginx 0.8.11 < 1.30.4 / 1.31.x < 1.31.3 Use-After-Free Memory Corruption	Nessus	Web Servers	2026/11/3	2026/11/3	high

检测

插件搜索

high

high

high

high

high

high

critical

high