The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69293 advisory.

    * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass     (CVE-2026-27136)

    * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting     (CVE-2026-25681)

    * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree     rendering (CVE-2026-42502)

    * github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage:
    go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers     (CVE-2026-41178)

    * github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy     (CVE-2026-55677)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42080 advisory.

    Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing     IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to     individual teams, while automation developers retain the freedom to write tasks that leverage existing     knowledge without the overhead. Ansible Automation Platform makes it possible for users across an     organization to share, vet, and manage automation content by means of a simple, powerful, and agentless     language.

    Security Fix(es):

    * ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution     (CVE-2026-11332)
    * receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
    * receptor: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries     (CVE-2026-27145)
    * receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing     (CVE-2026-39821)

    For details about this release, refer to the release notes listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42078 advisory.

    Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing     IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to     individual teams, while automation developers retain the freedom to write tasks that leverage existing     knowledge without the overhead. Ansible Automation Platform makes it possible for users across an     organization to share, vet, and manage automation content by means of a simple, powerful, and agentless     language.

    Security Fix(es):

    * ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution     (CVE-2026-11332)
    * automation-controller: Path traversal via malicious entry point name in pip wheel installation allows     arbitrary file overwrite (CVE-2026-8643)
    * automation-controller: urllib3: Denial of Service due to excessive HTTP response decompression     (CVE-2026-44432)
    * automation-gateway: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (CVE-2026-44492)
    * automation-gateway: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF     cookie name (CVE-2026-44496)
    * automation-gateway: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (CVE-2026-44494)
    * automation-gateway: Axios: Information disclosure of proxy credentials via HTTP redirects     (CVE-2026-44486)
    * automation-gateway: Axios: Information disclosure of proxy credentials via redirect flows     (CVE-2026-44487)
    * automation-gateway: Axios: Denial of Service due to unenforced request and response size limits     (CVE-2026-44488)
    * automation-gateway: Axios: Information disclosure due to prototype pollution vulnerability     (CVE-2026-44495)
    * automation-gateway: fast-uri: URI authority bypass due to improper delimiter handling (CVE-2026-6322)
    * automation-gateway: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget     (CVE-2026-42044)
    * automation-gateway: fast-uri: Path traversal vulnerability allows bypass of security policies     (CVE-2026-6321)
    * automation-gateway: lodash: Arbitrary code execution via untrusted input in template imports     (CVE-2026-4800)
    * automation-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing     (CVE-2026-12382)
    * python3.12-pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport     (CVE-2026-12701)
    * receptor: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)
    * receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
    * receptor: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
    * receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing     (CVE-2026-39821)
    * receptor: Go crypto/x509: Denial of Service via inefficient certificate chain validation     (CVE-2026-32281)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    For details about this release, refer to the release notes listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:97555 advisory.

    * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint     application (CVE-2026-33810)

    * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building     (CVE-2026-32280)

    * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass     (CVE-2026-27136)

    Bug Fix(es) and Enhancement(s):

    * [grafana / rhel-9.9] Remove Lua ExclusiveArch macro for Konflux build (JIRA:Rocky Linux-188281)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2706-1 advisory.

    This update for buildah fixes the following issues

    - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html:
    multiple issues       when parsing HTML files (bsc#1267179).
    - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a     missing       encrypted key can lead to a denial of service (bsc#1262953).
    - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for     validation       bypass and privilege escalation (bsc#1266648).
    - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh     (bsc#1266191).
    - CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266191).
    - CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh     (bsc#1266191).
    - CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in     golang.org/x/crypto/ssh       (bsc#1266191).
    - CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in     golang.org/x/crypto/ssh       (bsc#1266191).
    - CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent       (bsc#1266191).
    - CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266191).
    - CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266191).
    - CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh     (bsc#1266191).
    - CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in     golang.org/x/crypto/ssh/knownhosts       (bsc#1266191).
    - CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in     golang.org/x/crypto/ssh       (bsc#1266191).
    - CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh     (bsc#1266191).
    - CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent     (bsc#1266191).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59560 advisory.

    A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild     under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It     is compatible with composer-cli and cockpit-composer clients.

    Security Fix(es):

    * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass     (CVE-2026-27136)

    * golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting     (CVE-2026-25681)

    * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree     rendering (CVE-2026-42502)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789483713 advisory.

  - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-27136)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-27136 advisory.

  - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-27136)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791280549 advisory.

  - Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go,     including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT)     standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE input, Go     JOSE could use excessive memory. The code used strings.Split(token, .) to split JWT tokens, which is     vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number     of `.` characters. An attacker could exploit this by sending numerous malformed tokens, leading to memory     exhaustion and a Denial of Service. Version 4.0.5 fixes this issue. As a workaround, applications could     pre-validate that payloads passed to Go JOSE do not contain an excessive number of `.` characters.
    (CVE-2025-27144)

  - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can     be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.
    (CVE-2026-27136)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_97555 advisory.

    * crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint     application (CVE-2026-33810)

    * crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building     (CVE-2026-32280)

    * golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass     (CVE-2026-27136)

    Bug Fix(es) and Enhancement(s):

    * [grafana / rhel-9.9] Remove Lua ExclusiveArch macro for Konflux build (JIRA:Rocky Linux-188281)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3203-1 advisory.

    - Security: re-vendor the bundled Go dependencies (no upstream source       changes; tarball rebuilt from v1.7.4 with updated go.mod/vendor):
      * golang.org/x/net v0.48.0 -> v0.55.0: CVE-2026-33814 (bsc#1265736),         CVE-2026-39821 (bsc#1266575), CVE-2026-25680, CVE-2026-25681,         CVE-2026-27136, CVE-2026-42502, CVE-2026-42506 (bsc#1267120)
      * golang.org/x/crypto v0.46.0 -> v0.52.0: CVE-2026-39827,         CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831,         CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835,         CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598         (bsc#1266151)
      * github.com/moby/spdystream v0.5.0 -> v0.5.1 folded into the vendor         tree;
    - Build with Go >= 1.25 (required by golang.org/x/net 0.55).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
349101	RockyLinux 9 : osbuild-composer (RLSA-2026:69293)	Nessus	Rocky Linux Local Security Checks	2026/9/22	2026/9/22	high
328030	RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update (Important) (RHSA-2026:42080)	Nessus	Red Hat Local Security Checks	2026/7/20	2026/9/18	high
328365	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2026:42078)	Nessus	Red Hat Local Security Checks	2026/7/20	2026/9/18	high
378508	RockyLinux 9 : grafana (RLSA-2026:97555)	Nessus	Rocky Linux Local Security Checks	2026/11/10	2026/11/10	high
324853	SUSE SLES15 Security Update : buildah (SUSE-SU-2026:2706-1)	Nessus	SuSE Local Security Checks	2026/7/2	2026/7/2	high
339542	RHEL 9 : osbuild-composer (RHSA-2026:59560)	Nessus	Red Hat Local Security Checks	2026/8/25	2026/8/25	medium
352739	AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789483713)	Nessus	Alma Linux Local Security Checks	2026/9/30	2026/9/30	medium
317705	Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-27136)	Nessus	Azure Linux Local Security Checks	2026/5/29	2026/6/5	medium
363135	Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791280549)	Nessus	Rocky Linux Local Security Checks	2026/10/6	2026/10/6	high
378959	Rocky Linux 9 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2026_97555)	Nessus	Rocky Linux Local Security Checks	2026/11/11	2026/11/11	high
329285	SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:3203-1)	Nessus	SuSE Local Security Checks	2026/7/24	2026/8/4	high
329722	openSUSE 16 Security Update : rclone (openSUSE-SU-2026:21436-1)	Nessus	SuSE Local Security Checks	2026/7/25	2026/8/14	critical

检测

插件搜索

high

high

high

high

high

medium

medium

medium

high

high

high

critical