According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect.(CVE-2025-1244)

Tenable has extracted the preceding description block directly from the EulerOS emacs security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:1915 advisory.

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11265:08 advisory.

    * Bump release to 23.0.1.1.tuxcare.els1     CVE(s):
    CVE-2025-1244     A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:2195 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.1.1 advisory.

  - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9840)

  - Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information     disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache     Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34,     from 9.0.0.M1 through 9.0.98. The following versions were EOL at the time the CVE was created but are     known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. If all of the     following were true, a malicious user was able to view security sensitive files and/or inject content into     those files: - writes enabled for the default servlet (disabled by default) - support for partial PUT     (enabled by default) - a target URL for security sensitive uploads that was a sub-directory of a target     URL for public uploads - attacker knowledge of the names of security sensitive files being uploaded - the     security sensitive files also being uploaded via partial PUT If all of the following were true, a     malicious user was able to perform remote code execution: - writes enabled for the default servlet     (disabled by default) - support for partial PUT (enabled by default) - application was using Tomcat's file     based session persistence with the default storage location - application included a library that may be     leveraged in a deserialization attack Users are recommended to upgrade to version 11.0.3, 10.1.35 or     9.0.99, which fixes the issue. (CVE-2025-24813)

  - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under     certain circumstances when the XML schematron has the <sch:name path=.../> schema elements. This flaw     allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the     program's crash using libxml or other possible undefined behaviors. (CVE-2025-49794)

  - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can     trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that     can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to     sensitive data being corrupted in memory. (CVE-2025-49796)

  - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations     can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of     service when processing crafted input. (CVE-2025-6021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
235412	EulerOS 2.0 SP12 : emacs (EulerOS-SA-2025-1414)	Nessus	Huawei Local Security Checks	5/6/2025	5/6/2025	high
236848	AlmaLinux 9 : emacs (ALSA-2025:1915)	Nessus	Alma Linux Local Security Checks	5/16/2025	5/16/2025	high
283002	MiracleLinux 7 : emacs-24.3-23.1.0.4.el7.AXS7 (AXSA:2025-11265:08)	Nessus	Miracle Linux Local Security Checks	1/13/2026	1/13/2026	high
221622	RHEL 9 : emacs (RHSA-2025:2195)	Nessus	Red Hat Local Security Checks	3/4/2025	6/5/2025	high
238229	EulerOS 2.0 SP13 : emacs (EulerOS-SA-2025-1612)	Nessus	Huawei Local Security Checks	6/11/2025	6/11/2025	high
255240	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.1.1)	Nessus	Misc.	8/26/2025	4/19/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high