A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information disclosure if the launcher is subsequently processed.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fbeaecb457 advisory.

    * fix CVE-2026-6842 and CVE-29026-6843

    Resolves: CVE-2026-6842     Resolves: CVE-2026-6843     Resolves: rhbz#2455127     Resolves: rhbz#2455314


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d0a0f1c3d2 advisory.

    * fix CVE-2026-6842 and CVE-29026-6843

    Resolves: CVE-2026-6842     Resolves: CVE-2026-6843     Resolves: rhbz#2455127     Resolves: rhbz#2455314


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3111ffa11a advisory.

    * fix CVE-2026-6842 and CVE-29026-6843

    Resolves: CVE-2026-6842     Resolves: CVE-2026-6843     Resolves: rhbz#2455127     Resolves: rhbz#2455314


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in nano. In environments with permissive umask settings, a local attacker can exploit     incorrect directory permissions (0777 instead of 0700) for the `~/.local` directory. This allows the     attacker to inject a malicious `.desktop` launcher, which could lead to unintended actions or information     disclosure if the launcher is subsequently processed. (CVE-2026-6842)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
314524	Fedora 42 : nano (2026-fbeaecb457)	Nessus	Fedora Local Security Checks	low
313026	Fedora 43 : nano (2026-d0a0f1c3d2)	Nessus	Fedora Local Security Checks	low
312244	Fedora 44 : nano (2026-3111ffa11a)	Nessus	Fedora Local Security Checks	low
309643	Linux Distros Unpatched Vulnerability : CVE-2026-6842	Nessus	Misc.	low

Detections

Analytics

CVE-2026-6842

low

Tenable Plugins

low

low

low

low