uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but do not reject out-of-range writes (small buf or large offset). This allows silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept
    external output buffers but do not reject out-of-range writes (small buf or large offset). This allows
    silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.
    (CVE-2026-41907)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs. Prior to 14.0.0, v3, v5, and v6 accept     external output buffers but do not reject out-of-range writes (small buf or large offset). This allows     silent partial writes into caller-provided buffers. This vulnerability is fixed in 14.0.0.
    (CVE-2026-41907)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
474336	Echo: uuid: security update to 11.1.1	Tenable Cloud Security	Echo Local Security Checks	Local	critical
474336	Echo: uuid: security update to 11.1.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
310519	Linux Distros Unpatched Vulnerability : CVE-2026-41907	Nessus	Misc.	Local	critical
440758	SCA: security update for uuid (GHSA-w5hq-g745-h8pq)	Tenable Cloud Security	SCA Checks	Local	critical
440758	SCA: security update for uuid (GHSA-w5hq-g745-h8pq)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical

Detections

Analytics

CVE-2026-41907

critical

Tenable Plugins

critical

critical

critical

critical

critical