Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a crash or limited heap memory exposure when loaded.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3b9c14cd66 advisory.

    3.2.6


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6fe2310246 advisory.

    3.2.6


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-75bde5d061 advisory.

    3.2.6


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit()     when processing savegame files with invalid unit activity indices. An attacker can craft a malicious     savegame file with an out-of-range activity index that bypasses bounds checking and causes a crash or     limited heap memory exposure when loaded. (CVE-2026-90557)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
348269	Fedora 44 : freeciv (2026-3b9c14cd66)	Nessus	Fedora Local Security Checks	Local	high
348259	Fedora 45 : freeciv (2026-6fe2310246)	Nessus	Fedora Local Security Checks	Local	high
348250	Fedora 43 : freeciv (2026-75bde5d061)	Nessus	Fedora Local Security Checks	Local	high
345448	Linux Distros Unpatched Vulnerability : CVE-2026-90557	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-90557

medium

Tenable Plugins

high

high

high

medium