Detections
Analytics
Linux Distros Unpatched Vulnerability : CVE-2026-56858
medium Nessus Plugin ID 335390
Language:
Synopsis
The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be patched.Description
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.- Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS. (CVE-2026-56858)
Note that Nessus relies on the presence of the package as reported by the vendor.
Solution
There is no known solution at this time.See Also
https://access.redhat.com/security/cve/cve-2026-56858
Plugin Details
Severity: Medium
ID: 335390
File Name: unpatched_CVE_2026_56858.nasl
Version: 1.26
Type: Local
Agent: unix
Family: Misc.
Published: 8/14/2026
Updated: 9/24/2026
Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 93.28
CVSS v2
Risk Factor: Low
Base Score: 3.5
Temporal Score: 3
Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N
CVSS Score Source: CVE-2026-56858
CVSS v3
Risk Factor: Medium
Base Score: 6.1
Temporal Score: 5.6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:U/RC:C
Vulnerability Information
CPE: cpe:/o:canonical:ubuntu_linux:14.04:-:lts, cpe:/o:canonical:ubuntu_linux:16.04:-:lts, cpe:/o:canonical:ubuntu_linux:18.04:-:lts, cpe:/o:canonical:ubuntu_linux:20.04:-:lts, cpe:/o:canonical:ubuntu_linux:22.04:-:lts, cpe:/o:canonical:ubuntu_linux:24.04:-:lts, cpe:/o:canonical:ubuntu_linux:26.04:-:lts, cpe:/o:centos:centos:7, cpe:/o:centos:centos:8, cpe:/o:debian:debian_linux:12.0, cpe:/o:debian:debian_linux:13.0, cpe:/o:debian:debian_linux:14.0, cpe:/o:redhat:enterprise_linux:10, cpe:/o:redhat:enterprise_linux:7, cpe:/o:redhat:enterprise_linux:8, cpe:/o:redhat:enterprise_linux:9, p-cpe:/a:canonical:ubuntu_linux:golang-1.10, p-cpe:/a:canonical:ubuntu_linux:golang-1.13, p-cpe:/a:canonical:ubuntu_linux:golang-1.14, p-cpe:/a:canonical:ubuntu_linux:golang-1.16, p-cpe:/a:canonical:ubuntu_linux:golang-1.17, p-cpe:/a:canonical:ubuntu_linux:golang-1.18, p-cpe:/a:canonical:ubuntu_linux:golang-1.20, p-cpe:/a:canonical:ubuntu_linux:golang-1.21, p-cpe:/a:canonical:ubuntu_linux:golang-1.22, p-cpe:/a:canonical:ubuntu_linux:golang-1.23, p-cpe:/a:canonical:ubuntu_linux:golang-1.24, p-cpe:/a:canonical:ubuntu_linux:golang-1.25, p-cpe:/a:canonical:ubuntu_linux:golang-1.6, p-cpe:/a:canonical:ubuntu_linux:golang-1.8, p-cpe:/a:canonical:ubuntu_linux:golang-1.9, p-cpe:/a:centos:centos:delve, p-cpe:/a:centos:centos:gvisor-tap-vsock-gvforwarder, p-cpe:/a:centos:centos:gvisor-tap-vsock, p-cpe:/a:centos:centos:ignition-edge, p-cpe:/a:centos:centos:ignition-grub, p-cpe:/a:centos:centos:ignition-validate, p-cpe:/a:centos:centos:ignition, p-cpe:/a:centos:centos:rhc-worker-script, p-cpe:/a:centos:centos:rhc, p-cpe:/a:debian:debian_linux:golang-1.19, p-cpe:/a:debian:debian_linux:golang-1.24, p-cpe:/a:debian:debian_linux:golang-1.25, p-cpe:/a:redhat:enterprise_linux:delve, p-cpe:/a:redhat:enterprise_linux:gvisor-tap-vsock-gvforwarder, p-cpe:/a:redhat:enterprise_linux:gvisor-tap-vsock, p-cpe:/a:redhat:enterprise_linux:ignition-edge, p-cpe:/a:redhat:enterprise_linux:ignition-grub, p-cpe:/a:redhat:enterprise_linux:ignition-validate, p-cpe:/a:redhat:enterprise_linux:ignition, p-cpe:/a:redhat:enterprise_linux:rhc-worker-script, p-cpe:/a:redhat:enterprise_linux:rhc
Required KB Items: Host/cpu, Host/local_checks_enabled, global_settings/vendor_unpatched, Host/OS/identifier
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 8/13/2026
Reference Information
CVE: CVE-2026-56858