The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes  for JavaScript     string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated     script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.
    (CVE-2026-6019)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-6019

low Nessus Plugin ID 309950

Version 1.12