The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes  for JavaScript     string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated     script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.
    (CVE-2026-6019)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-6019

low Nessus Plugin ID 309950

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.11 Jun 16, 2026, 2:46 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606161446
Version 1.10 Jun 11, 2026, 6:45 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606111845
Version 1.9 May 29, 2026, 5:27 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605291727
Version 1.8 May 25, 2026, 10:30 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605252230
Version 1.6 May 19, 2026, 3:29 PM CVSS metrics ("CVSSv2 score" set to 6.4) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202605191529
Version 1.5 May 18, 2026, 10:15 PM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202605182215
Version 1.4 May 17, 2026, 3:22 AM CVSS metrics ("CVSSv2 score" set to 5.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N") Detection (updated detection logic) Plugin Feed: 202605170322
Version 1.3 Apr 29, 2026, 12:50 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604291250
Version 1.2 Apr 25, 2026, 4:14 PM CVSS metrics ("CVSSv2 score" set to 4.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N") Detection (updated detection logic) Plugin metadata Plugin Feed: 202604251614
Version 1.1 Apr 23, 2026, 10:45 PM New Plugin Feed: 202604232245