The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address     literals as dns identifiers and follows HTTP redirects without validating that the target is a public     address. An unauthenticated ACME account holder can exploit this to perform server-side request forgery     (SSRF), making the Dogtag server send HTTP GET requests to internal network services. With the InMemory     database backend, the response body of internal targets is disclosed to the attacker through the ACME     challenge error. (CVE-2026-18369)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-18369

medium Nessus Plugin ID 330901

Version 1.2