The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle     Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this     vulnerability can result in unauthorized read access to a subset of Oracle Java SE accessible data. Note:
    This vulnerability can only be exploited by supplying data to APIs in the specified Component without     using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service.
    (CVE-2026-87291)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-87291

medium Nessus Plugin ID 370045

Version 1.2