The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58819 advisory.

    * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function     (CVE-2026-14257)

    * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification     (CVE-2026-54272)

    * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152)

    * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and     trust-boundary bypass (CVE-2026-69192)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54371 advisory.

    * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822)

    * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5     (CVE-2026-11824)

    * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function     (CVE-2026-14257)

    * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification     (CVE-2026-54272)

    * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152)

    * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and     trust-boundary bypass (CVE-2026-69192)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55603 advisory.

    * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822)
      * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5     (CVE-2026-11824)
      * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function     (CVE-2026-14257)
      * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address     misclassification (CVE-2026-54272)
      * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152)
      * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF)     and trust-boundary bypass (CVE-2026-69192)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_58819 advisory.

    * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function     (CVE-2026-14257)

    * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification     (CVE-2026-54272)

    * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152)

    * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and     trust-boundary bypass (CVE-2026-69192)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-52841 advisory.

    [3.1.14-3]
    - Fix CVE-2026-69152 - brace-expansion

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1639:01 advisory.

    * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822)
      * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5     (CVE-2026-11824)
      * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function     (CVE-2026-14257)
      * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152)
      * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF)     and trust-boundary bypass (CVE-2026-69192)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c1e25a4642 advisory.

    - Resolves: rhbz#2492927 CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length     bypasses size limit leading to heap buffer overflow [fedora-all]
    - Resolves: rhbz#2497652 CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv()     via padded SASL UNBIND [fedora-all]
    - Resolves: rhbz#2511796 CVE-2026-69152 389-ds-base: brace-expansion: Denial of Service via unbounded     intermediate arrays [fedora-all]
    - Resolves: rhbz#2529450 CVE-2026-76560 389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI     bind-rule checks via empty bind DN [fedora-all]
    - Resolves: rhbz#2529451 CVE-2026-18453 389-ds-base: 389-ds-base: pre-authentication NULL pointer     dereference via paged results and USE_ONE_BACKEND control in op_shared_search [fedora-all]
    - Resolves: rhbz#2529452 CVE-2026-18355 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-     record length lower-bound underflow in sasl_io_start_packet() [fedora-all]
    - Resolves: rhbz#2494775 CVE-2026-11611 389-ds-base: 389-ds-base: Content Sync plugin unbounded queue     growth and race conditions [fedora-all]
    - Resolves: rhbz#2494825 CVE-2026-11884 389-ds-base: 389-ds-base: heap buffer overflow in schema     objectclass serialization due to missing oc_superior in size calculation [fedora-all]
    - Resolves: rhbz#2494894 CVE-2026-11790 389-ds-base: 389-ds-base: PBKDF2 password storage plugin unbounded     iteration count denial of service [fedora-all]
    - Resolves: rhbz#2494895 CVE-2026-11789 389-ds-base: 389-ds-base: SMD5 password storage plugin salt length     integer underflow crash [fedora-all]
    - Resolves: rhbz#2509729 CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in     CleanAllRUV status check [fedora-all]
    - Resolves: rhbz#2513063 CVE-2026-19404 389-ds-base: 389-ds-base: missing authorization allows anonymous     clients to start or abort CleanAllRUV replication maintenance [fedora-all]
    - Resolves: rhbz#2494827 CVE-2026-11793 389-ds-base: 389-ds-base: stack buffer overflow in checkPrefix()     algorithm ID parsing [fedora-all]
    - Resolves: rhbz#2494830 CVE-2026-11792 389-ds-base: 389-ds-base: heap buffer overflow in audit log     password masking (create_masked_entry_string) [fedora-all]
    - Resolves: rhbz#2498023 CVE-2026-15041 389-ds-base: 389-ds-base: Non-constant-time comparison in     PBKDF2-SHA256 password verification [fedora-all]


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55603 advisory.

    * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822)

    * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5     (CVE-2026-11824)

    * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function     (CVE-2026-14257)

    * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification     (CVE-2026-54272)

    * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152)

    * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and     trust-boundary bypass (CVE-2026-69192)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
339426	RockyLinux 10 : nodejs24 (RLSA-2026:58819)	Nessus	Rocky Linux Local Security Checks	2026/8/25	2026/8/26	high
339535	RockyLinux 8 : nodejs:24 (RLSA-2026:54371)	Nessus	Rocky Linux Local Security Checks	2026/8/25	2026/8/25	high
342184	AlmaLinux 9 : nodejs:24 (ALSA-2026:55603)	Nessus	Alma Linux Local Security Checks	2026/9/1	2026/9/1	high
356552	Rocky Linux 10.2 [CIQ] Security Update: nodejs24 / nodejs24-debuginfo / nodejs24-debugsource / etc Multiple Vulnerabilities (crlsa-2026_58819)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	high
334427	Oracle Linux 10 : nodejs-nodemon (ELSA-2026-52841)	Nessus	Oracle Linux Local Security Checks	2026/8/10	2026/8/10	high
339111	MiracleLinux 9 : nodejs:22 (AXSA:2026-1639:01)	Nessus	Miracle Linux Local Security Checks	2026/8/24	2026/11/3	high
349930	Fedora 45 : 389-ds-base (2026-c1e25a4642)	Nessus	Fedora Local Security Checks	2026/9/24	2026/9/24	medium
339465	RockyLinux 9 : nodejs:24 (RLSA-2026:55603)	Nessus	Rocky Linux Local Security Checks	2026/8/25	2026/8/25	high

检测

插件搜索

high

high

high

high

high

high

medium

high