An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130356 advisory.

    An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive     information via the Session Extension changeset concat/changegroup merge path

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive     information via the Session Extension changeset concat/changegroup merge path(CVE-2026-50813)

Tenable has extracted the preceding description block directly from the EulerOS sqlite security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before     check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial     of service. The issue occurs when sqlite3changeset_apply_v3() applies a corrupt changeset and reaches     sqlite3_value_type() with a NULL sqlite3_value pointer.(CVE-2026-50812)

    An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive     information via the Session Extension changeset concat/changegroup merge path(CVE-2026-50813)

Tenable has extracted the preceding description block directly from the EulerOS sqlite security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive
    information via the Session Extension changeset concat/changegroup merge path (CVE-2026-50813)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive     information via the Session Extension changeset concat/changegroup merge path (CVE-2026-50813)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
366240	Unity Linux 20.1070e Security Update: sqlite (UTSA-2026-130356)	Nessus	Unity Linux Local Security Checks	Local	medium
365026	EulerOS 2.0 SP11 : sqlite (EulerOS-SA-2026-4381)	Nessus	Huawei Local Security Checks	Local	medium
364978	EulerOS 2.0 SP11 : sqlite (EulerOS-SA-2026-4291)	Nessus	Huawei Local Security Checks	Local	medium
364898	EulerOS 2.0 SP13 : sqlite (EulerOS-SA-2026-4109)	Nessus	Huawei Local Security Checks	Local	medium
364773	EulerOS 2.0 SP13 : sqlite (EulerOS-SA-2026-4200)	Nessus	Huawei Local Security Checks	Local	medium
364032	EulerOS 2.0 SP15 : sqlite (EulerOS-SA-2026-3953)	Nessus	Huawei Local Security Checks	Local	medium
364027	EulerOS 2.0 SP15 : sqlite (EulerOS-SA-2026-4019)	Nessus	Huawei Local Security Checks	Local	medium
458557	Echo: sqlite3: security update to 3.46.1-7+e5	Tenable Cloud Security	Echo Local Security Checks	Local	medium
458557	Echo: sqlite3: security update to 3.46.1-7+e5	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
326085	Linux Distros Unpatched Vulnerability : CVE-2026-50813	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-50813

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium