The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever     no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the     certificate presents any service identity, so a certificate carrying a non-matching DNS SAN was still     accepted when its CN matched the requested peer_name. A certificate trusted by the client for one name can     therefore be used to impersonate another. (CVE-2026-91769)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-91769

medium Nessus Plugin ID 349707

Version 1.5