Security Update for Microsoft Visual Studio Code Nx-Console Extension (CVE-2026-48027)

#TRUSTED 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
#TRUST-RSA-SHA256 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
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(318799);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/06/06");

  script_cve_id("CVE-2026-48027");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2026/06/10");

  script_name(english:"Security Update for Microsoft Visual Studio Code Nx-Console Extension (CVE-2026-48027)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host has an application installed that is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The Microsoft Visual Studio Code Nx-Console Extension is version 18.95.0. It is, therefore, affected by an embedded
malicious code vulnerability. The compromised extension fetched an obfuscated payload that could harvest credentials from
multiple sources on disk and in memory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a0165d7a");
  # https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?1ea926a4");
  script_set_attribute(attribute:"solution", value:
"Update the Microsoft Visual Studio Code Nx-Console Extension to version 18.100.0 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:A");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-48027");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/05/18");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/05/18");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/06/05");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:microsoft:visual_studio_code");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("macos_microsoft_visual_studio_code_extensions_installed.nbin", "microsoft_visual_studio_code_win_extensions_installed.nbin");
  script_require_keys("installed_sw/Microsoft Visual Studio Code");

  exit(0);
}

include('vcf.inc');

var win_local = FALSE;
if (!empty_or_null(get_kb_item('SMB/Registry/Enumerated')))
  win_local = TRUE;

var app_info = vcf::get_app_info(app:'vs-code::angular-console', win_local:win_local);

var constraints = [
  { 'min_version' : '18.95.0', 'max_version' : '18.95.0', 'fixed_version' : '18.100.0' }
];

vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE);