PHP 8.4.x < 8.4.26 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.4.26. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.4.26 advisory. - Debian Linux - php8.2 - None php8.4 - None CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766,...

Linux Distros Unpatched Vulnerability : CVE-2026-91766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the...

Linux Distros Unpatched Vulnerability : CVE-2026-95811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling of a path ...

Linux Distros Unpatched Vulnerability : CVE-2026-6103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to...

Linux Distros Unpatched Vulnerability : CVE-2026-91767

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whos...

Linux Distros Unpatched Vulnerability : CVE-2026-88816

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the...

Linux Distros Unpatched Vulnerability : CVE-2026-93682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of...

Linux Distros Unpatched Vulnerability : CVE-2026-91765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing te...

PHP 8.5.x < 8.5.11 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.5.11. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.5.11 advisory. - Debian Linux - php8.2 - None php8.4 - None CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766,...

Linux Distros Unpatched Vulnerability : CVE-2026-92842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is...

Linux Distros Unpatched Vulnerability : CVE-2026-91768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix...

Linux Distros Unpatched Vulnerability : CVE-2026-95516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - zbar - None Ubuntu Linux - Unknown description CVE-2026-95516 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-96281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older version by removing the app's remote ref...

Linux Distros Unpatched Vulnerability : CVE-2026-94422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bu...

Linux Distros Unpatched Vulnerability : CVE-2026-85495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - ppp - None Ubuntu Linux - pre-authentication global buffer overflow CVE-2026-85495 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2026-93403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - rsyslog - None Ubuntu Linux - Stack-based Buffer Overflow in mmpstrucdata rsyslog plugin CVE-2026-93403 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2026-93402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - rsyslog - None Ubuntu Linux - mdtls discards the peer-identity verification result CVE-2026-93402 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-96280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing...

Linux Distros Unpatched Vulnerability : CVE-2026-92162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI...

Linux Distros Unpatched Vulnerability : CVE-2026-94640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique...