The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20290-1 advisory.

    - Update to version 3.2.12+git0.6011f448e
    - CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
    - CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8036-1 advisory.

    Asim Viladi Oglu Manizada discovered that HAProxy incorrectly handled certain INITIAL packets. A remote     attacker could possibly use this issue to cause HAProxy to crash, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6130 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6130-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     February 12, 2026                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : haproxy     CVE ID         : CVE-2026-26081

    Asim Viladi Oglu Manizada reported that HAProxy, a load balancing     reverse proxy, does not properly validate an INITIAL QUIC packet with     specially crafted data, which may result in denial of service (process     crash).

    For the stable distribution (trixie), this problem has been fixed in     version 3.0.11-1+deb13u2.

    We recommend that you upgrade your haproxy packages.

    For the detailed security status of haproxy please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/haproxy

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
300391	openSUSE 16 Security Update : haproxy (openSUSE-SU-2026:20290-1)	Nessus	SuSE Local Security Checks	high
299056	Ubuntu 25.10 : HAProxy vulnerability (USN-8036-1)	Nessus	Ubuntu Local Security Checks	high
298846	Debian dsa-6130 : haproxy - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2026-26081

high

Tenable Plugins

high

high

high