Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before
    0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. (CVE-2026-55970)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before     0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. (CVE-2026-55970)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
457461	Echo: thrift: security update to 0.19.0-4+e1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
457461	Echo: thrift: security update to 0.19.0-4+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
330379	Linux Distros Unpatched Vulnerability : CVE-2026-55970	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-55970

medium

Tenable Plugins

Coming Soon

medium

medium

medium