The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source     address rewrite behind skb_ensure_writable(skb, 0). This is intentional: at the bridge ebtables hooks the     Ethernet header is addressed through skb_mac_header()/eth_hdr(), while skb->data points at the Ethernet     payload. Asking skb_ensure_writable() for ETH_HLEN bytes would check the payload, not the Ethernet header,     and would reintroduce the small packet regression fixed by commit 63137bc5882a. However, the optional ARP     sender hardware address rewrite is different. It writes through skb_store_bits() at an offset relative to     skb->data: skb_store_bits(skb, sizeof(struct arphdr), info->mac, ETH_ALEN) skb_header_pointer() only     safely reads the ARP header; it does not make the later sender hardware address range writable. If that     range is still held in a nonlinear skb fragment backed by a splice-imported file page, skb_store_bits()     maps the frag page and copies the new MAC address directly into it. Ensure the ARP SHA range is writable     before reading the ARP header and before calling skb_store_bits(). (CVE-2026-53266)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53266

high Nessus Plugin ID 323525

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.11 Jul 16, 2026, 9:04 PM CVSSv3 score source (changed from "CVE-2026-53266" to none) Plugin Feed: 202607162104
Version 1.10 Jul 15, 2026, 7:54 AM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607150754
Version 1.9 Jul 15, 2026, 2:58 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSSv3 score source (set to "CVE-2026-53266") Detection (updated detection logic) Plugin Feed: 202607150258
Version 1.8 Jul 9, 2026, 1:09 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607091309
Version 1.7 Jul 8, 2026, 6:25 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607081825
Version 1.6 Jul 7, 2026, 11:10 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607071110
Version 1.5 Jul 6, 2026, 4:58 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607060458
Version 1.4 Jul 4, 2026, 4:43 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607041643
Version 1.2 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.1 Jun 28, 2026, 8:12 PM New Plugin Feed: 202606282012