The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1425:07 advisory.

    * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias     resolution due to libXfont2 name length mismatch (CVE-2026-50256)
      * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence()     (CVE-2026-50257)
      * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due     to unchecked shift levels (CVE-2026-50258)
      * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap     request via mapWidths indexing (CVE-2026-50259)
      * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter()     (CVE-2026-50260)
      * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter()     (CVE-2026-50261)
      * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX     ChangeDrawableAttributes (CVE-2026-50262)
      * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in     CreateSaverWindow() (CVE-2026-50263)
      * xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2     DRIGetBuffers/DRIGetBuffersWithFormat (CVE-2026-50264)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 9 : tigervnc-1.15.0-7.el9_8.2 (AXSA:2026-1425:07)

high Nessus Plugin ID 331764

Version 1.2