The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without     hijacking the connection, the server improperly continues to read and serve requests from the connection.
    Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not     treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to     potential request smuggling, where an intermediate proxy considers the data on the connection to be     tunneled and the server considers it to be HTTP. (CVE-2026-94439)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-94439

high Nessus Plugin ID 364299

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Oct 29, 2026, 3:00 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610291500
Version 1.7 Oct 23, 2026, 11:36 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610231136
Version 1.6 Oct 20, 2026, 4:30 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610200430
Version 1.5 Oct 18, 2026, 5:28 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610180528
Version 1.4 Oct 16, 2026, 2:12 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610160212
Version 1.3 Oct 15, 2026, 9:10 PM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610152110
Version 1.2 Oct 12, 2026, 7:38 AM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N") Plugin Feed: 202610120738
Version 1.1 Oct 9, 2026, 2:01 PM New Plugin Feed: 202610091401