Lucene search
K

Linux Distros Unpatched Vulnerability : CVE-2026-25645

🗓️ 26 Mar 2026 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 3 Views

Linux hosts have an unpatched vulnerability in the requests library before version 2.33.0 that allows a local attacker to replace files via a predictable temporary filename during zip extraction.

Related
Refs
Code
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin:Requests SSL Verification Issue Fixed in 2.32.0
4 May 202612:45
ibm
IBM Security Bulletins
Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
5 May 202614:43
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Scheduler Optimizer uses requests-2.32.5-py3-none-any.whl which is vulnerable to CVE-2026-25645
7 May 202614:30
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in requests-2.32.4-py3-none-any.whl
6 May 202604:11
ibm
IBM Security Bulletins
Security Bulletin: Location Service for ESRI Component uses cryptography-46.0.6, pyasn1-0.6.2, requests-2.32.5 and cryptography-46.0.5 library which were vulnerable to multiple CVEs
5 May 202603:01
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.
3 Jun 202607:19
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.
7 May 202613:57
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Application Suite uses fast-xml-parser-5.5.5.tgz and requests-2.32.5-py3-none-any.whl, which are vulnerable to CVE-2026-33349 and CVE-2026-25645.
30 Apr 202611:40
ibm
IBM Security Bulletins
Security Bulletin: There is a vulnerability in requests-2.32.5-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-25645)
5 May 202607:48
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Application Suite - Predict Component uses requests-2.32.4-py3-none-any.whl, requests-2.32.5-py3-none-any.whl which is vulnerable to CVE-2026-25645
1 May 202614:51
ibm
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(303843);
  script_version("1.8");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/05/29");

  script_cve_id("CVE-2026-25645");

  script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-25645");

  script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
  script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.

  - Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility
    function uses a predictable filename when extracting files from zip archives into the system temporary
    directory. If the target file already exists, it is reused without validation. A local attacker with write
    access to the temp directory could pre-create a malicious file that would be loaded in place of the
    legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only
    applications that call `extract_zipped_paths()` directly are impacted. Starting in version 2.33.0, the
    library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set
    `TMPDIR` in their environment to a directory with restricted write access. (CVE-2026-25645)

Note that Nessus relies on the presence of the package as reported by the vendor.");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2026-25645");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2026-25645");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2026-25645");
  script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-25645");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_set_attribute(attribute:"vendor_unpatched", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/03/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/03/26");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:25.10");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:11.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:13.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:14.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:10");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:python-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:requests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-aliyun");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-all");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-amt-ws");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-apc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-apc-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-aws");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-azure-arm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-bladecenter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-brocade");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-cisco-mds");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-cisco-ucs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-compute");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-drac5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-eaton-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-emerson");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-eps");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-gce");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-heuristics-ping");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-hpblade");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ibm-powervs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ibm-vpc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ibmblade");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ifmib");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ilo-moonshot");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ilo-mp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ilo-ssh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ilo2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-intelmodular");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ipdu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-ipmilan");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-kdump");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-kubevirt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-lpar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-mpath");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-nutanix-ahv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-openstack");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-redfish");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-rhevm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-rsa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-rsb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-sbd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-scsi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-virsh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-vmware-rest");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-vmware-soap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-wti");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-agents-zvm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-virt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-virtd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-virtd-cpg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-virtd-libvirt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-virtd-multicast");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-virtd-serial");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:fence-virtd-tcp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ha-cloud-support");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:platform-python-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-pip-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.11-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.11-pip-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.12-pip-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3.14-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:resource-agents");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:resource-agents-aliyun");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:resource-agents-gcp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:resource-agents-paf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:requests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-aliyun");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-all");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-amt-ws");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-apc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-apc-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-aws");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-azure-arm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-bladecenter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-brocade");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-cisco-mds");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-cisco-ucs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-compute");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-drac5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-eaton-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-emerson");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-eps");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-gce");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-heuristics-ping");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-hpblade");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ibm-powervs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ibm-vpc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ibmblade");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ifmib");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ilo-moonshot");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ilo-mp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ilo-ssh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ilo2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-intelmodular");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ipdu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-ipmilan");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-kdump");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-kubevirt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-lpar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-mpath");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-nutanix-ahv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-openstack");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-redfish");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-rhevm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-rsa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-rsb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-sbd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-scsi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-virsh");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-vmware-rest");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-vmware-soap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-wti");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-agents-zvm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-virt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-virtd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-virtd-cpg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-virtd-libvirt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-virtd-multicast");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-virtd-serial");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:fence-virtd-tcp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ha-cloud-support");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:platform-python-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-pip-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.11-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.11-pip-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.12-pip-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3.14-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:resource-agents");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:resource-agents-aliyun");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:resource-agents-gcp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:resource-agents-paf");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
  script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
  script_require_ports("Host/OS/CentOS Linux-7", "Host/OS/CentOS Linux-8", "Host/OS/Debian Linux-11", "Host/OS/Debian Linux-12", "Host/OS/Debian Linux-13", "Host/OS/Debian Linux-14", "Host/OS/Red Hat Enterprise Linux-10", "Host/OS/Red Hat Enterprise Linux-7", "Host/OS/Red Hat Enterprise Linux-8", "Host/OS/Red Hat Enterprise Linux-9", "Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-25.10", "Host/OS/Ubuntu Linux-26.04");

  exit(0);
}

if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/CentOS/rpm-list")) && empty_or_null(get_one_kb_item("Host/Debian/dpkg-l")) && empty_or_null(get_one_kb_item("Host/RedHat/rpm-list"))) audit(AUDIT_PACKAGE_LIST_MISSING);

include('linux_unpatched.inc');

var distro_constraints_array = {
  "Debian Linux-11": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "11",
        "pkgs": [
          {"reference": "python-requests-doc"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Debian Linux-12": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "12",
        "pkgs": [
          {"reference": "python-requests-doc"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Debian Linux-13": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "13",
        "pkgs": [
          {"reference": "python-requests-doc"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Debian Linux-14": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14",
        "pkgs": [
          {"reference": "python-requests-doc"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Ubuntu Linux-14.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14.04",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python-requests"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Ubuntu Linux-16.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "16.04",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python-requests"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Ubuntu Linux-18.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "18.04",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python-requests"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Ubuntu Linux-20.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "20.04",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Ubuntu Linux-22.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "22.04",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python-requests-doc"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Ubuntu Linux-24.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "24.04",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python-requests-doc"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Ubuntu Linux-25.10": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "25.10",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python-requests-doc"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Ubuntu Linux-26.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "26.04",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python-requests-doc"},
          {"reference": "python3-requests"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-10": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "10",
        "pkgs": [
          {"reference": "python3-pip"},
          {"reference": "python3-pip-wheel"},
          {"reference": "python3.14-pip"}
        ]
      }
    ]
  },
  "CentOS Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python3-pip"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "python-pip"},
          {"reference": "python3-pip"}
        ]
      }
    ]
  },
  "CentOS Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "fence-agents"},
          {"reference": "fence-agents-aliyun"},
          {"reference": "fence-agents-all"},
          {"reference": "fence-agents-amt-ws"},
          {"reference": "fence-agents-apc"},
          {"reference": "fence-agents-apc-snmp"},
          {"reference": "fence-agents-aws"},
          {"reference": "fence-agents-azure-arm"},
          {"reference": "fence-agents-bladecenter"},
          {"reference": "fence-agents-brocade"},
          {"reference": "fence-agents-cisco-mds"},
          {"reference": "fence-agents-cisco-ucs"},
          {"reference": "fence-agents-common"},
          {"reference": "fence-agents-compute"},
          {"reference": "fence-agents-drac5"},
          {"reference": "fence-agents-eaton-snmp"},
          {"reference": "fence-agents-emerson"},
          {"reference": "fence-agents-eps"},
          {"reference": "fence-agents-gce"},
          {"reference": "fence-agents-heuristics-ping"},
          {"reference": "fence-agents-hpblade"},
          {"reference": "fence-agents-ibm-powervs"},
          {"reference": "fence-agents-ibm-vpc"},
          {"reference": "fence-agents-ibmblade"},
          {"reference": "fence-agents-ifmib"},
          {"reference": "fence-agents-ilo-moonshot"},
          {"reference": "fence-agents-ilo-mp"},
          {"reference": "fence-agents-ilo-ssh"},
          {"reference": "fence-agents-ilo2"},
          {"reference": "fence-agents-intelmodular"},
          {"reference": "fence-agents-ipdu"},
          {"reference": "fence-agents-ipmilan"},
          {"reference": "fence-agents-kdump"},
          {"reference": "fence-agents-kubevirt"},
          {"reference": "fence-agents-lpar"},
          {"reference": "fence-agents-mpath"},
          {"reference": "fence-agents-nutanix-ahv"},
          {"reference": "fence-agents-openstack"},
          {"reference": "fence-agents-redfish"},
          {"reference": "fence-agents-rhevm"},
          {"reference": "fence-agents-rsa"},
          {"reference": "fence-agents-rsb"},
          {"reference": "fence-agents-sbd"},
          {"reference": "fence-agents-scsi"},
          {"reference": "fence-agents-virsh"},
          {"reference": "fence-agents-vmware-rest"},
          {"reference": "fence-agents-vmware-soap"},
          {"reference": "fence-agents-wti"},
          {"reference": "fence-agents-zvm"},
          {"reference": "platform-python-pip"},
          {"reference": "python-pip"},
          {"reference": "python3-pip"},
          {"reference": "python3-pip-wheel"},
          {"reference": "python3.11-pip"},
          {"reference": "python3.11-pip-wheel"},
          {"reference": "python3.12-pip"},
          {"reference": "python3.12-pip-wheel"},
          {"reference": "resource-agents"},
          {"reference": "resource-agents-aliyun"},
          {"reference": "resource-agents-gcp"},
          {"reference": "resource-agents-paf"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "fence-agents"},
          {"reference": "fence-agents-aliyun"},
          {"reference": "fence-agents-all"},
          {"reference": "fence-agents-amt-ws"},
          {"reference": "fence-agents-apc"},
          {"reference": "fence-agents-apc-snmp"},
          {"reference": "fence-agents-aws"},
          {"reference": "fence-agents-azure-arm"},
          {"reference": "fence-agents-bladecenter"},
          {"reference": "fence-agents-brocade"},
          {"reference": "fence-agents-cisco-mds"},
          {"reference": "fence-agents-cisco-ucs"},
          {"reference": "fence-agents-common"},
          {"reference": "fence-agents-compute"},
          {"reference": "fence-agents-drac5"},
          {"reference": "fence-agents-eaton-snmp"},
          {"reference": "fence-agents-emerson"},
          {"reference": "fence-agents-eps"},
          {"reference": "fence-agents-gce"},
          {"reference": "fence-agents-heuristics-ping"},
          {"reference": "fence-agents-hpblade"},
          {"reference": "fence-agents-ibm-powervs"},
          {"reference": "fence-agents-ibm-vpc"},
          {"reference": "fence-agents-ibmblade"},
          {"reference": "fence-agents-ifmib"},
          {"reference": "fence-agents-ilo-moonshot"},
          {"reference": "fence-agents-ilo-mp"},
          {"reference": "fence-agents-ilo-ssh"},
          {"reference": "fence-agents-ilo2"},
          {"reference": "fence-agents-intelmodular"},
          {"reference": "fence-agents-ipdu"},
          {"reference": "fence-agents-ipmilan"},
          {"reference": "fence-agents-kdump"},
          {"reference": "fence-agents-kubevirt"},
          {"reference": "fence-agents-lpar"},
          {"reference": "fence-agents-mpath"},
          {"reference": "fence-agents-nutanix-ahv"},
          {"reference": "fence-agents-openstack"},
          {"reference": "fence-agents-redfish"},
          {"reference": "fence-agents-rhevm"},
          {"reference": "fence-agents-rsa"},
          {"reference": "fence-agents-rsb"},
          {"reference": "fence-agents-sbd"},
          {"reference": "fence-agents-scsi"},
          {"reference": "fence-agents-virsh"},
          {"reference": "fence-agents-vmware-rest"},
          {"reference": "fence-agents-vmware-soap"},
          {"reference": "fence-agents-wti"},
          {"reference": "fence-agents-zvm"},
          {"reference": "platform-python-pip"},
          {"reference": "python-pip"},
          {"reference": "python3-pip"},
          {"reference": "python3-pip-wheel"},
          {"reference": "python3.11-pip"},
          {"reference": "python3.11-pip-wheel"},
          {"reference": "python3.12-pip"},
          {"reference": "python3.12-pip-wheel"},
          {"reference": "resource-agents"},
          {"reference": "resource-agents-aliyun"},
          {"reference": "resource-agents-gcp"},
          {"reference": "resource-agents-paf"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-9": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "9",
        "pkgs": [
          {"reference": "fence-agents"},
          {"reference": "fence-agents-aliyun"},
          {"reference": "fence-agents-all"},
          {"reference": "fence-agents-amt-ws"},
          {"reference": "fence-agents-apc"},
          {"reference": "fence-agents-apc-snmp"},
          {"reference": "fence-agents-aws"},
          {"reference": "fence-agents-azure-arm"},
          {"reference": "fence-agents-bladecenter"},
          {"reference": "fence-agents-brocade"},
          {"reference": "fence-agents-cisco-mds"},
          {"reference": "fence-agents-cisco-ucs"},
          {"reference": "fence-agents-common"},
          {"reference": "fence-agents-compute"},
          {"reference": "fence-agents-drac5"},
          {"reference": "fence-agents-eaton-snmp"},
          {"reference": "fence-agents-emerson"},
          {"reference": "fence-agents-eps"},
          {"reference": "fence-agents-gce"},
          {"reference": "fence-agents-heuristics-ping"},
          {"reference": "fence-agents-hpblade"},
          {"reference": "fence-agents-ibm-powervs"},
          {"reference": "fence-agents-ibm-vpc"},
          {"reference": "fence-agents-ibmblade"},
          {"reference": "fence-agents-ifmib"},
          {"reference": "fence-agents-ilo-moonshot"},
          {"reference": "fence-agents-ilo-mp"},
          {"reference": "fence-agents-ilo-ssh"},
          {"reference": "fence-agents-ilo2"},
          {"reference": "fence-agents-intelmodular"},
          {"reference": "fence-agents-ipdu"},
          {"reference": "fence-agents-ipmilan"},
          {"reference": "fence-agents-kdump"},
          {"reference": "fence-agents-kubevirt"},
          {"reference": "fence-agents-lpar"},
          {"reference": "fence-agents-mpath"},
          {"reference": "fence-agents-nutanix-ahv"},
          {"reference": "fence-agents-openstack"},
          {"reference": "fence-agents-redfish"},
          {"reference": "fence-agents-rhevm"},
          {"reference": "fence-agents-rsa"},
          {"reference": "fence-agents-rsb"},
          {"reference": "fence-agents-sbd"},
          {"reference": "fence-agents-scsi"},
          {"reference": "fence-agents-virsh"},
          {"reference": "fence-agents-vmware-rest"},
          {"reference": "fence-agents-vmware-soap"},
          {"reference": "fence-agents-wti"},
          {"reference": "fence-agents-zvm"},
          {"reference": "fence-virt"},
          {"reference": "fence-virtd"},
          {"reference": "fence-virtd-cpg"},
          {"reference": "fence-virtd-libvirt"},
          {"reference": "fence-virtd-multicast"},
          {"reference": "fence-virtd-serial"},
          {"reference": "fence-virtd-tcp"},
          {"reference": "ha-cloud-support"},
          {"reference": "python-pip"},
          {"reference": "python3-pip"},
          {"reference": "python3-pip-wheel"},
          {"reference": "python3.11-pip"},
          {"reference": "python3.11-pip-wheel"},
          {"reference": "python3.12-pip"},
          {"reference": "python3.12-pip-wheel"},
          {"reference": "python3.14-pip"}
        ]
      }
    ]
  }
};

var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);

if (!empty_or_null(report))
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : report
  );
  exit(0);
}
else
{
  audit(AUDIT_HOST_NOT, 'affected');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 May 2026 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.14.4 - 5.5
EPSS0.00005
SSVC
3