The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21548-1 advisory.

    This update for gd fixes the following issue:

    - CVE-2026-9672: security issue in `libgd` (bsc#1273101).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3553-1 advisory.

    This update for gd fixes the following issue:

    - CVE-2026-9672: security issues in `libgd` (bsc#1273101).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4731 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4731-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     August 11, 2026                               https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : libgd2     Version        : 2.3.0-2+deb11u2 2.3.3-9+deb12u1     CVE ID         : CVE-2026-9672     Debian Bug     : 1143152

    A vulnerability was discovered in libgd2, a library for programmatic     graphics creation and manipulation, which may result in denial of     service or potentially the execution of arbitrary code if a malformed     GIF file is processed.

    For Debian 11 bullseye, this problem has been fixed in version     2.3.0-2+deb11u2.

    For Debian 12 bookworm, this problem has been fixed in version     2.3.3-9+deb12u1.

    We recommend that you upgrade your libgd2 packages.

    For the detailed security status of libgd2 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libgd2

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3538-1 advisory.

    This update for gd fixes the following issue:

    - CVE-2026-9672: security issues in `libgd` (bsc#1273101).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3514-1 advisory.

    Update to version 8.2.33.

    Security issues fixed:

    - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C     stack exhaustion       (bsc#1273077).
    - CVE-2026-9672: security issues in `libgd` (bsc#1273078).
    - CVE-2026-17543: improper escaping of backslashes in user-provided parameters allows for trivial SQL     injection in       `ext-pgsql` (bsc#1273075).
    - CVE-2026-14355: buffer allocation flaw in the AES-WRAP-PAD algorithm implementation can lead to heap     metadata       corruption and an application abort (bsc#1270351).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3513-1 advisory.

    - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C     stack exhaustion       (bsc#1273077).
    - CVE-2026-9672: security issues in `libgd` (bsc#1273078).
    - CVE-2026-17543: improper escaping of backslashes in user-provided parameters allows for trivial SQL     injection in       `ext-pgsql` (bsc#1273075).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21532-1 advisory.

    This update for php8 fixes the following issues

    - Update to version 8.4.24
    - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
    - CVE-2026-9672: Upgrade libgd (bsc#1273078).
    - CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
    - CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3510-1 advisory.

    - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
    - CVE-2026-9672: Upgrade libgd (bsc#1273078).
    - CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3509-1 advisory.

    Update to version 8.3.33.

    Security issues fixed:

    - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C     stack exhaustion       (bsc#1273077).
    - CVE-2026-9672: security issues in `libgd` (bsc#1273078).
    - CVE-2026-17543: improper escaping of backslashes in user-provided parameters allows for trivial SQL     injection in       `ext-pgsql` (bsc#1273075).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the version of PHP installed on the remote host is 8.2.x prior to 8.2.33, 8.3.x prior to 8.3.33, 8.4.x prior to 8.4.24, or 8.5.x prior to 8.5.9. It is, therefore, affected by multiple vulnerabilities:

- Out-of-bounds write in bccomp() in BCMath. (CVE-2026-17544)

- Vulnerability in the bundled libgd library. (CVE-2026-9672)

- SQL injection via E'...' backslash breakout in PGSQL. (CVE-2026-17543)

- Crash via recursive symlinks in Phar. (CVE-2026-7260)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of php installed on the remote host is prior to 8.2.33-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.2-2026-013 advisory.

    Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in     PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.*     before 8.5.9. (CVE-2026-17543)

    Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and     crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.*     before 8.4.24, and from 8.5.* before 8.5.9. (CVE-2026-7260)

    NOTE: Fixed by: https://github.com/php/php-src/commit/b590f0380fda26ed180874a0255f0be078434315     (php-8.4.24)DEBIANBUG: [1143152] (CVE-2026-9672)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6409 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6409-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     August 01, 2026                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : libgd2     CVE ID         : CVE-2026-9672     Debian Bug     : 1143151

    A vulnerability was discovered in libgd2, a library for programmatic     graphics creation and manipulation, which may result in denial of     service or potentially the execution of arbitrary code if a malformed     GIF file is processed.

    For the stable distribution (trixie), this problem has been fixed in     version 2.3.3-14~deb13u1.

    We recommend that you upgrade your libgd2 packages.

    For the detailed security status of libgd2 please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/libgd2

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in     PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.*     before 8.5.9. (CVE-2026-17543)  Circular symbolic links in phar archives could lead to unbounded     recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33,     from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9. (CVE-2026-7260)  NOTE:
    Fixed by: https://github.com/php/php-src/commit/b590f0380fda26ed180874a0255f0be078434315     (php-8.4.24)DEBIANBUG: [1143152] (CVE-2026-9672) (CVE-2026-9672)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of php82 installed on the remote host is prior to 8.2.33 / 8.4.24. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-211-01 advisory.

    New php packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the php82 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.4.24. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.4.24 advisory.

  - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in     PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.*     before 8.5.9. (CVE-2026-17543)

  - Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption     in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9. (CVE-2026-17544)

  - Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and     crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.*     before 8.4.24, and from 8.5.* before 8.5.9. (CVE-2026-7260)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.3.33. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.33 advisory.

  - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in     PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.*     before 8.5.9. (CVE-2026-17543)

  - Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and     crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.*     before 8.4.24, and from 8.5.* before 8.5.9. (CVE-2026-7260)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.5.9. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.5.9 advisory.

  - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in     PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.*     before 8.5.9. (CVE-2026-17543)

  - Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption     in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9. (CVE-2026-17544)

  - Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and     crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.*     before 8.4.24, and from 8.5.* before 8.5.9. (CVE-2026-7260)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.2.33. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.33 advisory.

  - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in     PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.*     before 8.5.9. (CVE-2026-17543)

  - Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and     crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.*     before 8.4.24, and from 8.5.* before 8.5.9. (CVE-2026-7260)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
335079	openSUSE 16 Security Update : gd (openSUSE-SU-2026:21548-1)	Nessus	SuSE Local Security Checks	Local	medium
334700	SUSE SLED15 / SLES15 Security Update : gd (SUSE-SU-2026:3553-1)	Nessus	SuSE Local Security Checks	Local	medium
334646	Debian dla-4731 : libgd-dev - security update	Nessus	Debian Local Security Checks	Local	medium
334470	SUSE SLES12 Security Update : gd (SUSE-SU-2026:3538-1)	Nessus	SuSE Local Security Checks	Local	medium
333282	SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:3514-1)	Nessus	SuSE Local Security Checks	Local	critical
333277	SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:3513-1)	Nessus	SuSE Local Security Checks	Local	critical
333268	openSUSE 16: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (openSUSE-SU-2026:21532-1)	Nessus	SuSE Local Security Checks	Local	critical
333042	SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2026:3510-1)	Nessus	SuSE Local Security Checks	Local	critical
333017	SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:3509-1)	Nessus	SuSE Local Security Checks	Local	critical
115355	PHP 8.2.x < 8.2.33 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
115354	PHP 8.3.x < 8.3.33 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
115353	PHP 8.4.x < 8.4.24 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
115352	PHP 8.5.x < 8.5.9 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	critical
332033	Amazon Linux 2 : php, --advisory ALAS2PHP8.2-2026-013 (ALASPHP8.2-2026-013)	Nessus	Amazon Linux Local Security Checks	Local	critical
331577	Debian dsa-6409 : libgd-dev - security update	Nessus	Debian Local Security Checks	Local	critical
331336	Linux Distros Unpatched Vulnerability : CVE-2026-9672	Nessus	Misc.	Local	critical
331323	Slackware Linux 15.0 / current php82 Multiple Vulnerabilities (SSA:2026-211-01)	Nessus	Slackware Local Security Checks	Local	critical
331281	PHP 8.4.x < 8.4.24 Multiple Vulnerabilities SQLI	Nessus	CGI abuses	Remote	critical
331280	PHP 8.3.x < 8.3.33 Multiple Vulnerabilities SQLI	Nessus	CGI abuses	Remote	critical
331218	PHP 8.5.x < 8.5.9 Multiple Vulnerabilities SQLI	Nessus	CGI abuses	Remote	critical
331102	PHP 8.2.x < 8.2.33 Multiple Vulnerabilities SQLI	Nessus	CGI abuses	Remote	critical

Detections

Analytics

CVE-2026-9672

medium

Tenable Plugins

medium

medium

medium

medium

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical