The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more     requests than intended. CrossOriginProtection then skips validation, but forwards the original request     path, which may be served by a different handler without the intended security protections.
    (CVE-2025-47910)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-47910

medium Nessus Plugin ID 266048

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.3

Version 1.8 Jan 30, 2026, 10:33 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601302233
Version 1.7 Jan 21, 2026, 5:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211700
Version 1.6 Jan 14, 2026, 5:08 AM Detection (updated detection logic) Plugin Feed: 202601140508
Version 1.5 Nov 23, 2025, 4:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511230441
Version 1.3 Oct 1, 2025, 9:12 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510012112