The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0498 advisory.

    This advisory aggregates security fixes for the thunderbird SRPM in CIQ LTS 9.2. It addresses 62 CVEs:
    CVE-2024-1547, CVE-2024-1552, CVE-2023-6857, CVE-2024-1551, CVE-2024-5696, and 57 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Rocky Linux 9.2 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (ciqsa-2026_0498)

high Nessus Plugin ID 353468

Version 1.4

Version 1.3

Version 1.4 Oct 13, 2026, 11:47 AM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202610131147
Version 1.3 Oct 12, 2026, 7:38 AM CVE (set "CVE" coverage to "CVE-2022-40674,CVE-2023-5388,CVE-2023-6204,CVE-2023-6205,CVE-2023-6206,CVE-2023-6207,CVE-2023-6208,CVE-2023-6209,CVE-2023-6212,CVE-2023-6856,CVE-2023-6857,CVE-2023-6858,CVE-2023-6859,CVE-2023-6860,CVE-2023-6861,CVE-2023-6862,CVE-2023-6863,CVE-2023-6864,CVE-2023-50761,CVE-2023-50762,CVE-2024-0741,CVE-2024-0742,CVE-2024-0743,CVE-2024-0746,CVE-2024-0747,CVE-2024-0749,CVE-2024-0750,CVE-2024-0751,CVE-2024-0753,CVE-2024-0755,CVE-2024-1546,CVE-2024-1547,CVE-2024-1548,CVE-2024-1549,CVE-2024-1550,CVE-2024-1551,CVE-2024-1552,CVE-2024-1553,CVE-2024-1936,CVE-2024-2607,CVE-2024-2608,CVE-2024-2610,CVE-2024-2611,CVE-2024-2612,CVE-2024-2614,CVE-2024-4367,CVE-2024-4767,CVE-2024-4768,CVE-2024-4769,CVE-2024-4770,CVE-2024-4777,CVE-2024-5688,CVE-2024-5690,CVE-2024-5691,CVE-2024-5693,CVE-2024-5696,CVE-2024-5700,CVE-2024-5702,CVE-2024-6601,CVE-2024-6602,CVE-2024-6603,CVE-2024-6604") Exploit attributes ("Exploited by malware" changed from "True" to none) Plugin metadata Plugin Feed: 202610120738