The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto-     enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install     it into the local trust store without proper verification. An attacker with the ability to intercept or     redirect network traffic could exploit this behavior to supply a malicious certificate authority     certificate, potentially allowing interception or spoofing of trusted communications. (CVE-2026-3012)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-3012

high Nessus Plugin ID 317041

Version 1.3