The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in     libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3_DO_NOT_CACHE flag is set,     even though the cache is not yet initialized before Demand Active. A malicious or compromised RDP server     can send a Cache Bitmap V3 order during connection setup to crash a connecting client that has enabled the     non-default Bitmap Cache V3 feature (/cache:codec:<rfx|nsc|jpeg>). (CVE-2026-109939)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
371842	Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-3307)	Nessus	Amazon Linux Local Security Checks	10/25/2026	10/25/2026	high
369127	Linux Distros Unpatched Vulnerability : CVE-2026-109939	Nessus	Misc.	10/21/2026	10/22/2026	high

Detections

Analytics

Plugins Search

high

high