The remote Amazon Linux host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the     request. Some contexts may not properly account for this scenario and leave request memory in an     uninitialized state before performing an allocation. The subsequent request cleanup procedure may read     or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to     remote code execution (RCE). (CVE-2026-109618)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Amazon Linux Unpatched Vulnerability : CVE-2026-109618

critical Nessus Plugin ID 372053

Version 1.2