The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature     Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code     for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This issue affects     LibreOffice: from 24.8 before < 24.8.6, from 25.2 before < 25.2.2. (CVE-2025-2866)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-2866

low Nessus Plugin ID 260214

Version 1.2

Version 1.1

Version 1.2 Aug 4, 2026, 2:26 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202608040226
Version 1.1 Sep 2, 2025, 6:30 AM New Plugin Feed: 202509020630