`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

amazon_alas ALAS2023-2026-1933: Amazon Linux 2023 Security Advisory:ALAS2023-2026-1933

amazon_alas ALAS2023-2026-1910: Amazon Linux 2023 Security Advisory:ALAS2023-2026-1910

amazon_alas ALAS2023-2026-1930: Amazon Linux 2023 Security Advisory:ALAS2023-2026-1930

amazon_alas ALAS2023-2026-1931: Amazon Linux 2023 Security Advisory:ALAS2023-2026-1931

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8524-1 advisory.

    It was discovered that Python did not use sufficient entropy for Expat hash-flooding protection in the     xml.parsers.expat and xml.etree.ElementTree modules. An attacker could use this to cause a denial of     service via a crafted XML document.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b17b2a984a advisory.

    New Python release including bugfixes and security fixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-a2c583a4ab advisory.

    New Python release including bugfixes and security fixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dfc9182263 advisory.

    New Python version including bugfixes and security fixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2deb979d80 advisory.

    New Python release including bugfixes and security fixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the python3 package has been released.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1774 advisory.

    The tarfile module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while     processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a     crafted tar archive being misinterpreted by the tarfile module compared to other implementations.
    (CVE-2025-13462)

    CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. (CVE-2026-1502)

    The profiling.sampling module (Python 3.15+) and asyncio introspection capabilities (3.14+, python -m     asyncio ps and python -m asyncio pstree) features could be used to read and write addresses in a     privileged process if that process connected to a malicious or infected Python process via the remote     debugging feature. This vulnerability requires persistently and repeatedly connecting to the process to be     exploited, even after the connecting process crashes with high likelihood due to ASLR. (CVE-2026-5713)

    http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes  for JavaScript     string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated     script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.
    (CVE-2026-6019)

    `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding     protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this     vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch. (CVE-2026-7210)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding     protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this     vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch. (CVE-2026-7210)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
326307	Ubuntu 16.04 LTS : Python vulnerability (USN-8524-1)	Nessus	Ubuntu Local Security Checks	medium
323276	Fedora 43 : python3-docs / python3.14 (2026-b17b2a984a)	Nessus	Fedora Local Security Checks	medium
322120	Fedora 44 : python3-docs / python3.14 (2026-a2c583a4ab)	Nessus	Fedora Local Security Checks	medium
321848	Fedora 44 : python3.13 (2026-dfc9182263)	Nessus	Fedora Local Security Checks	critical
321844	Fedora 43 : python3.13 (2026-2deb979d80)	Nessus	Fedora Local Security Checks	critical
321579	Photon OS 5.0: Python3 PHSA-2026-5.0-0882	Nessus	PhotonOS Local Security Checks	high
319867	Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-1774)	Nessus	Amazon Linux Local Security Checks	medium
314657	Linux Distros Unpatched Vulnerability : CVE-2026-7210	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-7210

medium

Tenable Plugins

Coming Soon

medium

medium

medium

critical

critical

high

medium

medium