Linux Distros Unpatched Vulnerability : CVE-2026-54160

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(351222);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/29");

  script_cve_id("CVE-2026-54160");

  script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-54160");

  script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
  script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.

  - Network UPS Tools is a collection of programs which provide a common interface for monitoring and
    administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script
    used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was mis-structured
    in terms of mixing code running with higher privileges (single-use token generated with write permissions)
    and untrusted inputs (PR source branch). A malicious PR run from a fork could extract the GITHUB_TOKEN
    value. It could potentially be abused while it was valid (while the GHA job ran) to manipulate Git
    repository contents, commit checks/statuses, or issue/PR comments, according to permissions it was issued
    with. This issue has been patched via commits 658b24e and 1aa31d1. (CVE-2026-54160)

Note that Nessus relies on the presence of the package as reported by the vendor.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2026-54160");
  script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-54160");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_set_attribute(attribute:"vendor_unpatched", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/29");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:nut");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
  script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
  script_require_ports("Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-26.04");

  exit(0);
}

if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/Debian/dpkg-l"))) audit(AUDIT_PACKAGE_LIST_MISSING);

include('linux_unpatched.inc');

var distro_constraints_array = {
  "Ubuntu Linux-14.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14.04",
        "pkgs": [
          {"reference": "libups-nut-perl"},
          {"reference": "libupsclient-dev"},
          {"reference": "libupsclient3"},
          {"reference": "nut"},
          {"reference": "nut-cgi"},
          {"reference": "nut-client"},
          {"reference": "nut-doc"},
          {"reference": "nut-ipmi"},
          {"reference": "nut-monitor"},
          {"reference": "nut-server"},
          {"reference": "nut-snmp"},
          {"reference": "nut-xml"},
          {"reference": "python-nut"}
        ]
      }
    ]
  },
  "Ubuntu Linux-16.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "16.04",
        "pkgs": [
          {"reference": "libups-nut-perl"},
          {"reference": "libupsclient-dev"},
          {"reference": "libupsclient4"},
          {"reference": "nut"},
          {"reference": "nut-cgi"},
          {"reference": "nut-client"},
          {"reference": "nut-doc"},
          {"reference": "nut-ipmi"},
          {"reference": "nut-monitor"},
          {"reference": "nut-server"},
          {"reference": "nut-snmp"},
          {"reference": "nut-xml"},
          {"reference": "python-nut"}
        ]
      }
    ]
  },
  "Ubuntu Linux-18.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "18.04",
        "pkgs": [
          {"reference": "libnutclient-dev"},
          {"reference": "libnutclient0"},
          {"reference": "libups-nut-perl"},
          {"reference": "libupsclient-dev"},
          {"reference": "libupsclient4"},
          {"reference": "nut"},
          {"reference": "nut-cgi"},
          {"reference": "nut-client"},
          {"reference": "nut-doc"},
          {"reference": "nut-ipmi"},
          {"reference": "nut-monitor"},
          {"reference": "nut-server"},
          {"reference": "nut-snmp"},
          {"reference": "nut-xml"},
          {"reference": "python-nut"}
        ]
      }
    ]
  },
  "Ubuntu Linux-20.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "20.04",
        "pkgs": [
          {"reference": "libnutclient-dev"},
          {"reference": "libnutclient0"},
          {"reference": "libnutscan-dev"},
          {"reference": "libnutscan1"},
          {"reference": "libups-nut-perl"},
          {"reference": "libupsclient-dev"},
          {"reference": "libupsclient4"},
          {"reference": "nut"},
          {"reference": "nut-cgi"},
          {"reference": "nut-client"},
          {"reference": "nut-doc"},
          {"reference": "nut-ipmi"},
          {"reference": "nut-powerman-pdu"},
          {"reference": "nut-server"},
          {"reference": "nut-snmp"},
          {"reference": "nut-xml"}
        ]
      }
    ]
  },
  "Ubuntu Linux-22.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "22.04",
        "pkgs": [
          {"reference": "libnutclient-dev"},
          {"reference": "libnutclient0"},
          {"reference": "libnutscan-dev"},
          {"reference": "libnutscan1"},
          {"reference": "libups-nut-perl"},
          {"reference": "libupsclient-dev"},
          {"reference": "libupsclient4"},
          {"reference": "nut"},
          {"reference": "nut-cgi"},
          {"reference": "nut-client"},
          {"reference": "nut-doc"},
          {"reference": "nut-ipmi"},
          {"reference": "nut-powerman-pdu"},
          {"reference": "nut-server"},
          {"reference": "nut-snmp"},
          {"reference": "nut-xml"}
        ]
      }
    ]
  },
  "Ubuntu Linux-24.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "24.04",
        "pkgs": [
          {"reference": "libnutclient-dev"},
          {"reference": "libnutclient2t64"},
          {"reference": "libnutscan-dev"},
          {"reference": "libnutscan2t64"},
          {"reference": "libups-nut-perl"},
          {"reference": "libupsclient-dev"},
          {"reference": "libupsclient6t64"},
          {"reference": "nut"},
          {"reference": "nut-cgi"},
          {"reference": "nut-client"},
          {"reference": "nut-doc"},
          {"reference": "nut-i2c"},
          {"reference": "nut-ipmi"},
          {"reference": "nut-modbus"},
          {"reference": "nut-monitor"},
          {"reference": "nut-powerman-pdu"},
          {"reference": "nut-server"},
          {"reference": "nut-snmp"},
          {"reference": "nut-xml"},
          {"reference": "python3-nut"}
        ]
      }
    ]
  },
  "Ubuntu Linux-26.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "26.04",
        "pkgs": [
          {"reference": "libnutclient-dev"},
          {"reference": "libnutclient2t64"},
          {"reference": "libnutscan-dev"},
          {"reference": "libnutscan4"},
          {"reference": "libups-nut-perl"},
          {"reference": "libupsclient-dev"},
          {"reference": "libupsclient7"},
          {"reference": "nut"},
          {"reference": "nut-cgi"},
          {"reference": "nut-client"},
          {"reference": "nut-doc"},
          {"reference": "nut-i2c"},
          {"reference": "nut-ipmi"},
          {"reference": "nut-modbus"},
          {"reference": "nut-monitor"},
          {"reference": "nut-powerman-pdu"},
          {"reference": "nut-server"},
          {"reference": "nut-snmp"},
          {"reference": "nut-xml"},
          {"reference": "python3-nut"}
        ]
      }
    ]
  }
};

var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');

var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (!empty_or_null(third_party_support)) {
    var third_party_vendors = distro_constraints_values['third_party'];
    if (!empty_or_null(third_party_vendors)) {
        var vendor;
        foreach vendor (third_party_vendors) {
            if (vendor == third_party_support) exit(0, 'A third party management patch is available for this vulnerability from ' + vendor + '.\n');
        }
    }
}

var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);

if (!empty_or_null(report))
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : report
  );
  exit(0);
}
else
{
  audit(AUDIT_HOST_NOT, 'affected');
}