GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099538 advisory.

    GNU libidn before 1.44 is prone to out-of-bounds reads ofuninitialized memory in the ToUnicode APIs     because of mishandling inidna_to_unicode_internal. The affected code is not present in libidn2.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-acf66846ee advisory.

    Security fix for CVE-2026-57053.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2291be7d88 advisory.

    Security fix for CVE-2026-57053.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7ddafb24a3 advisory.

    Update to 1.44.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8521-1 advisory.

    It was discovered that Libidn incorrectly handled certain internationalized domain name strings. An     attacker could possibly use this issue to obtain sensitive information or cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs     because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.
    (CVE-2026-57053)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
336513	Unity Linux 20.1070e Security Update: libidn (UTSA-2026-099538)	Nessus	Unity Linux Local Security Checks	Local	low
334687	Fedora 43 : libidn (2026-acf66846ee)	Nessus	Fedora Local Security Checks	Local	low
334685	Fedora 44 : libidn (2026-2291be7d88)	Nessus	Fedora Local Security Checks	Local	low
334457	Fedora 43 : mingw-libidn (2026-7ddafb24a3)	Nessus	Fedora Local Security Checks	Local	low
326249	Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Libidn vulnerability (USN-8521-1)	Nessus	Ubuntu Local Security Checks	Local	low
323653	Linux Distros Unpatched Vulnerability : CVE-2026-57053	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2026-57053

low

Tenable Plugins

low

low

low

low

low

low