The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if     the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects     Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through     9.0.118, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected.
    Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.
    (CVE-2026-53404)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53404

high Nessus Plugin ID 323918

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.5 Jul 16, 2026, 8:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607160827
Version 1.4 Jul 6, 2026, 10:28 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607061028
Version 1.3 Jul 2, 2026, 3:38 PM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L") Detection (updated detection logic) Plugin metadata Plugin Feed: 202607021538
Version 1.1 Jun 30, 2026, 11:18 PM New Plugin Feed: 202606302318