The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when     SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate concurrently on one card handle. A malicious RDP     server can overlap these IRPs through separate context workers to free and reuse the SCardHandle, causing     client-process heap corruption and termination. (CVE-2026-109945)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
369114	Linux Distros Unpatched Vulnerability : CVE-2026-109945	Nessus	Misc.	10/21/2026	10/22/2026	medium
371842	Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-3307)	Nessus	Amazon Linux Local Security Checks	10/25/2026	10/25/2026	high

Detections

Analytics

Plugins Search

medium

high