The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in     smartcard_Transmit_Call that allows malicious RDP servers to read client memory. Servers can send     SCardTransmit requests with an invalid card handle and nonzero receive length, causing     smartcard_pack_transmit_return to serialize up to 66,560 uninitialized heap bytes. (CVE-2026-109948)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
371842	Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-3307)	Nessus	Amazon Linux Local Security Checks	10/25/2026	10/25/2026	high
369141	Linux Distros Unpatched Vulnerability : CVE-2026-109948	Nessus	Misc.	10/21/2026	10/22/2026	medium

Detections

Analytics

Plugins Search

high

medium