Detections
Analytics
Alpine: multiple aspnetcore9-runtime packages, multiple dotnet-host packages: security update to 9.0.22-r0
critical Tenable Self-Hosted Container Security Plugin ID 478171
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3
through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state
memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary
code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries
between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. (CVE-2026-111497)
- Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
(CVE-2026-114148)
Solution
Update the aspnetcore9-runtime library and its related packages to version 9.0.22-r0 or later.See Also
Plugin Details
Severity: Critical
ID: 478171
Version: Revision 1.1
Type: Local
Published: 11/2/2026
Updated: 11/2/2026
Supported Sensors: Agentless Assessment
Risk Information
VPR
Risk Factor: Critical
Score: 9.4
Percentile: 99.83
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-111497
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CVSS v4
Risk Factor: Critical
Base Score: 9.2
Threat Score: 9.2
Threat Vector: CVSS:4.0/E:A
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 10/21/2026
CISA Known Exploited Vulnerability Due Dates: 11/10/2026