"Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe functionality is enabled. Upgrade to version 3.0.0 or later, which fixes the issue.

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - "Remember me" cookie age is not verified on the server. This potentially allows an attacker to intercept a
    valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue
    affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe
    functionality is enabled. Upgrade to version 3.0.0 or later, which fixes the issue. (CVE-2026-56130)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Remember me cookie age is not verified on the server. This potentially allows an attacker to intercept a     valid cookie and reuse it indefinitely, even after the configured expiration time has passed. This issue     affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe     functionality is enabled. Upgrade to version 3.0.0 or later, which fixes the issue. (CVE-2026-56130)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478339	Chainguard: apache-activemq-6.3: security update to 6.3.3-r1	Tenable Cloud Security	Chainguard Local Security Checks	Local	low
478339	Chainguard: apache-activemq-6.3: security update to 6.3.3-r1	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	low
478302	SCA: security update for org.apache.shiro:shiro-core, org.apache.shiro:shiro-web (GHSA-m8g6-vrr2-x7ff)	Tenable Cloud Security	SCA Checks	Local	low
478302	SCA: security update for org.apache.shiro:shiro-core, org.apache.shiro:shiro-web (GHSA-m8g6-vrr2-x7ff)	Tenable Self-Hosted Container Security	SCA Checks	Local	low
323333	Linux Distros Unpatched Vulnerability : CVE-2026-56130	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2026-56130

low

Tenable Plugins

Coming Soon

low

low

low

low

low