The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6407 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6407-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 31, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : incus     CVE ID         : CVE-2026-62313 CVE-2026-62867 CVE-2026-62940 CVE-2026-62941                      CVE-2026-63125 CVE-2026-63343

    Multiple security issues were discovered in Incus, a system container     and virtual machine manager, which may result in bypass of security     restrictions or privilege escalation.

    For the stable distribution (trixie), these problems have been fixed in     version 6.0.4-2+deb13u9.

    We recommend that you upgrade your incus packages.

    For the detailed security status of incus please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/incus

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-6407 : golang-github-lxc-incus-dev - security update

critical Nessus Plugin ID 331515

Version 1.2

Version 1.1

Version 1.2 Aug 24, 2026, 3:52 PM CVSS metrics ("CVSSv2 score" set to 9.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 9.9) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H") Plugin Feed: 202608241552
Version 1.1 Aug 1, 2026, 6:58 AM New Plugin Feed: 202608010658