The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789746085 advisory.

  - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can     provide relative paths that allow it to write outside of the dedicated target directory for the download,     making it possible to overwrite files of the attacker's choice using the permissions of the user running     Ant in versions prior to Ant 1.10.18. In order to exploit this vulnerability, the server would either have     to be malicious or be subject to a machine-in-the-middle attack. Additionally in the case of scp or the     ftp task using ftps the server must pass the server identity checks performed by the tasks. For ftp tasks     not using ftps a malicious server could act as a machine-in-the-middle to provide malicious files.
    Starting with Ant 1.10.18 both tasks will prevent writing outside of the destination directory by default.
    An option is available to disable this behavior in the unlikely case that the old behavior is required by     existing build files. Mitigations: Users of scp and ftp (when using ftps) in any version of Ant should not     bypass server identity checks. Users of ftp not using ftps should switch to ftps where possible. All users     are recommended to upgrade to Apache Ant 1.10.18, which fixes this issue. (CVE-2026-78254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory.

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Document     Management (Spring Framework)). Supported versions that are affected are 22.12.0-22.12.15,     23.12.0-23.12.16, 24.12.0-24.12.16 and 25.12.0-25.12.9. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks     of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera     Unifier accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of     Primavera Unifier. (CVE-2026-22735, CVE-2026-22741, CVE-2026-22745, CVE-2026-41838, CVE-2026-41839,     CVE-2026-41840, CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41845,     CVE-2026-41846, CVE-2026-41848, CVE-2026-41850, CVE-2026-41851, CVE-2026-41852, CVE-2026-41854,     CVE-2026-41855)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform     (jsoup)). Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15, 23.12.0-23.12.16,     24.12.0-24.12.16 and 25.12.0-25.12.9. Easily exploitable vulnerability allows unauthenticated attacker     with network access via HTTP to compromise Primavera Unifier. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Primavera     Unifier. (CVE-2026-75140)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform     (jackson-databind)). Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15,     23.12.0-23.12.16, 24.12.0-24.12.16 and 25.12.0-25.12.9. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks     of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of Primavera Unifier. (CVE-2026-19032, CVE-2026-68497, CVE-2026-91777)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core).
    Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks     of this vulnerability can result in unauthorized creation, deletion or modification access to critical     data or all Primavera Unifier accessible data as well as unauthorized access to critical data or complete     access to all Primavera Unifier accessible data. (CVE-2026-101736)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project     Control). Supported versions that are affected are 23.12.0-23.12.16. Easily exploitable vulnerability     allows low privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful     attacks of this vulnerability can result in unauthorized creation, deletion or modification access to     critical data or all Primavera Unifier accessible data as well as unauthorized read access to a subset of     Primavera Unifier accessible data. (CVE-2026-101735)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789746085 advisory.

  - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can     provide relative paths that allow it to write outside of the dedicated target directory for the download,     making it possible to overwrite files of the attacker's choice using the permissions of the user running     Ant in versions prior to Ant 1.10.18. In order to exploit this vulnerability, the server would either have     to be malicious or be subject to a machine-in-the-middle attack. Additionally in the case of scp or the     ftp task using ftps the server must pass the server identity checks performed by the tasks. For ftp tasks     not using ftps a malicious server could act as a machine-in-the-middle to provide malicious files.
    Starting with Ant 1.10.18 both tasks will prevent writing outside of the destination directory by default.
    An option is available to disable this behavior in the unlikely case that the old behavior is required by     existing build files. Mitigations: Users of scp and ftp (when using ftps) in any version of Ant should not     bypass server identity checks. Users of ftp not using ftps should switch to ftps where possible. All users     are recommended to upgrade to Apache Ant 1.10.18, which fixes this issue. (CVE-2026-78254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789382807 advisory.

  - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can     provide relative paths that allow it to write outside of the dedicated target directory for the download,     making it possible to overwrite files of the attacker's choice using the permissions of the user running     Ant in versions prior to Ant 1.10.18. In order to exploit this vulnerability, the server would either have     to be malicious or be subject to a machine-in-the-middle attack. Additionally in the case of scp or the     ftp task using ftps the server must pass the server identity checks performed by the tasks. For ftp tasks     not using ftps a malicious server could act as a machine-in-the-middle to provide malicious files.
    Starting with Ant 1.10.18 both tasks will prevent writing outside of the destination directory by default.
    An option is available to disable this behavior in the unlikely case that the old behavior is required by     existing build files. Mitigations: Users of scp and ftp (when using ftps) in any version of Ant should not     bypass server identity checks. Users of ftp not using ftps should switch to ftps where possible. All users     are recommended to upgrade to Apache Ant 1.10.18, which fixes this issue. (CVE-2026-78254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of ant installed on the remote host is prior to 1.9.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4020 advisory.

    The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can     provide relative paths that allow it to write outside of the dedicated target directory for the download,     making it possible to overwrite files of the attacker's choice using the permissions of the user running     Ant in versions prior to Ant 1.10.18.



    In order to exploit this vulnerability, the server would either have to be malicious or be subject to a     machine-in-the-middle attack. Additionally in the case of scp or the ftp task using ftps the server must     pass the server identity checks performed by the tasks.



    For ftp tasks not using ftps a malicious server could act as a machine-in-the-middle to provide malicious     files.



    Starting with Ant 1.10.18 both tasks will prevent writing outside of the destination directory by default.
    An option is available to disable this behavior in the unlikely case that the  old behavior is required by     existing build files.



    Mitigations:



    Users of scp and ftp (when using ftps) in any version of Ant should not bypass server identity checks.
    Users of ftp not using ftps should switch to ftps where possible.



    All users are recommended to upgrade to Apache Ant 1.10.18, which fixes this issue. (CVE-2026-78254)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3239 advisory.

    The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can     provide relative paths that allow it to write outside of the dedicated target directory for the download,     making it possible to overwrite files of the attacker's choice using the permissions of the user running     Ant in versions prior to Ant 1.10.18.



    In order to exploit this vulnerability, the server would either have to be malicious or be subject to a     machine-in-the-middle attack. Additionally in the case of scp or the ftp task using ftps the server must     pass the server identity checks performed by the tasks.



    For ftp tasks not using ftps a malicious server could act as a machine-in-the-middle to provide malicious     files.



    Starting with Ant 1.10.18 both tasks will prevent writing outside of the destination directory by default.
    An option is available to disable this behavior in the unlikely case that the  old behavior is required by     existing build files.



    Mitigations:



    Users of scp and ftp (when using ftps) in any version of Ant should not bypass server identity checks.
    Users of ftp not using ftps should switch to ftps where possible.



    All users are recommended to upgrade to Apache Ant 1.10.18, which fixes this issue. (CVE-2026-78254)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21891-1 advisory.

    - CVE-2021-36374: excessive memory allocation when reading a specially crafted ZIP archive or a derived     formats       (bsc#1188469).
    - CVE-2025-7962: jakarta: improper neutralization of \r and \n UTF-8 characters can lead to SMTP injection       (bsc#1246873).
    - CVE-2026-78254: path traversal in ftp and scp tasks allows for arbitrary file writes (bsc#1280015).

    Changes for ant:

    - Upgrade to version 1.10.18
     * Breaking changes:
     + the default value for <ftp>'s useSecureDataChannel has been      changed to true which means using ftps now also tries to use      an encrypted data channel by default.
     + the <ftp> and <scp> tasks have new allowFilesToEscapeDest      attributes. When set to false - which is the default - the      tasks will not download files or create directories outside      the designated destination directory when downloading from the      remote server. In the unlikely case you need the old bahaviour      of writing outside the destination directory you must set the      value to true explicitly.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4677-1 advisory.

    This update introduces new libraries and refines existing Java tools to     improve security, compatibility, stability, and formatting.

    ant (Updated to version 1.10.18):

    - Security issues fixed:

      - CVE-2021-36374: Fixed excessive memory allocation when reading specially crafted ZIP archives or     derived formats         (bsc#1188469)
      - CVE-2025-7962: Fixed improper neutralization of line breaks to prevent SMTP injection (bsc#1246873)
      - CVE-2026-78254: Fixed path traversal in FTP and SCP tasks that could allow arbitrary file writes     (bsc#1280015)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can     provide relative paths that allow it to write outside of the dedicated target directory for the download,     making it possible to overwrite files of the attacker's choice using the permissions of the user running     Ant in versions prior to Ant 1.10.18. In order to exploit this vulnerability, the server would either have     to be malicious or be subject to a machine-in-the-middle attack. Additionally in the case of scp or the     ftp task using ftps the server must pass the server identity checks performed by the tasks. For ftp tasks     not using ftps a malicious server could act as a machine-in-the-middle to provide malicious files.
    Starting with Ant 1.10.18 both tasks will prevent writing outside of the destination directory by default.
    An option is available to disable this behavior in the unlikely case that the old behavior is required by     existing build files. Mitigations: Users of scp and ftp (when using ftps) in any version of Ant should not     bypass server identity checks. Users of ftp not using ftps should switch to ftps where possible. All users     are recommended to upgrade to Apache Ant 1.10.18, which fixes this issue. (CVE-2026-78254)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
353088	AlmaLinux 9.6 [TuxCare] Security Update: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / ant-apache-oro / etc (ALMALINUX9.6:CLSA-2026:1789746085)	Nessus	Alma Linux Local Security Checks	9/30/2026	9/30/2026	high
370446	Oracle Primavera Unifier (October 2026 CPU)	Nessus	CGI abuses	10/22/2026	10/26/2026	high
352444	Rocky Linux 9.6 [TuxCare] Security Update: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / ant-apache-oro / etc (ALMALINUX9.6:CLSA-2026:1789746085)	Nessus	Rocky Linux Local Security Checks	9/30/2026	9/30/2026	high
362151	AlmaLinux 9.2 [TuxCare] Security Update: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / ant-apache-oro / etc (ALMALINUX9.2:CLSA-2026:1789382807)	Nessus	Alma Linux Local Security Checks	10/1/2026	10/1/2026	high
371778	Amazon Linux 2 : ant (ALAS-2026-4020)	Nessus	Amazon Linux Local Security Checks	10/24/2026	10/24/2026	high
371826	Amazon Linux 2023 : ant, ant-antlr, ant-apache-bcel (ALAS2023-2026-3239)	Nessus	Amazon Linux Local Security Checks	10/25/2026	10/25/2026	high
350151	openSUSE 16: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / etc (openSUSE-SU-2026:21891-1)	Nessus	SuSE Local Security Checks	9/25/2026	9/25/2026	medium
366400	SUSE SLED15: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / etc (SUSE-SU-2026:4677-1)	Nessus	SuSE Local Security Checks	10/16/2026	10/16/2026	medium
343526	Linux Distros Unpatched Vulnerability : CVE-2026-78254	Nessus	Misc.	9/7/2026	11/6/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

medium

medium

high