According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Perl threads have a working directory race condition where file operations may target unintended paths.

    If a directory handle is open at thread creation, the process-wide current working directory is     temporarily changed in order to clonethat handle for the new thread, which is visible from any third     (ormore) thread already running.

    This may lead to unintended operationssuch as loading code or accessing files from unexpected     locations,which a local attacker may be able to exploit.

    The bug was introduced in commit11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version     5.13.6(CVE-2025-40909)

Tenable has extracted the preceding description block directly from the EulerOS perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.0. It is, therefore, affected by multiple vulnerabilities:

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and     3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and     a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however,     for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is     stringio 3.0.1.2. (CVE-2024-27280)

  - The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.5. An     app may be able to gain elevated privileges. (CVE-2025-31259)

  - Perl threads have a working directory race condition where file operations may target unintended paths. If     a directory handle is open at thread creation, the process-wide current working directory is temporarily     changed in order to clone that handle for the new thread, which is visible from any third (or more) thread     already running. This may lead to unintended operations such as loading code or accessing files from     unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit     11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6 (CVE-2025-40909)

  - A configuration issue was addressed with additional restrictions. (CVE-2025-24088, CVE-2025-24197,     CVE-2025-31255, CVE-2025-31268, CVE-2025-31269, CVE-2025-31270, CVE-2025-31271, CVE-2025-43190,     CVE-2025-43204, CVE-2025-43207, CVE-2025-43208, CVE-2025-43262, CVE-2025-43272, CVE-2025-43279,     CVE-2025-43283, CVE-2025-43285, CVE-2025-43286, CVE-2025-43287, CVE-2025-43291, CVE-2025-43292,     CVE-2025-43293, CVE-2025-43294, CVE-2025-43297, CVE-2025-43298, CVE-2025-43301, CVE-2025-43302,     CVE-2025-43304, CVE-2025-43305, CVE-2025-43307, CVE-2025-43308, CVE-2025-43310, CVE-2025-43311,     CVE-2025-43312, CVE-2025-43314, CVE-2025-43315, CVE-2025-43316, CVE-2025-43317, CVE-2025-43318,     CVE-2025-43319, CVE-2025-43321, CVE-2025-43325, CVE-2025-43326, CVE-2025-43327, CVE-2025-43328,     CVE-2025-43329, CVE-2025-43330, CVE-2025-43331, CVE-2025-43332, CVE-2025-43333, CVE-2025-43337,     CVE-2025-43340, CVE-2025-43341, CVE-2025-43342, CVE-2025-43343, CVE-2025-43344, CVE-2025-43346,     CVE-2025-43347, CVE-2025-43353, CVE-2025-43354, CVE-2025-43356, CVE-2025-43357, CVE-2025-43359,     CVE-2025-43366, CVE-2025-43367, CVE-2025-43368, CVE-2025-43369)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of perl installed on the remote host is prior to 5.16.3-294.45. It is, therefore, affected by a vulnerability as referenced in the ALAS-2025-1981 advisory.

    Thread creation while a directory handle is open does a fchdir, affecting other threads (race condition)     (CVE-2025-40909)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Perl threads have a working directory race condition where file operations may target unintended paths.If     a directory handle is open at thread creation, the process-wide current working directory is temporarily     changed in order to clone that handle for the new thread, which is visible from any third (or more) thread     already running. This may lead to unintended operations such as loading code or accessing files from     unexpected locations, which a local attacker may be able to exploit.The bug was introduced in commit     11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6(CVE-2025-40909)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10629:10 advisory.

    * perl: Perl threads have a working directory race condition where file operations may target unintended     paths (CVE-2025-40909)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Perl threads have a working directory race condition where file operations may target unintended paths.If     a directory handle is open at thread creation, the process-wide current working directory is temporarily     changed in order to clonethat handle for the new thread, which is visible from any third (ormore)     thread already running. This may lead to unintended operationssuch as loading code or accessing files     from unexpected locations,which a local attacker may be able to exploit.(CVE-2025-40909)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-8096 advisory.

    - Fix CVE-2025-40909 - Clone dirhandles without fchdir
    - Fix CVE-2023-47038
    - Fix CVE-2021-36770 - mitigate @INC pollution when loading ConfigLocal

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8. It is, therefore, affected by multiple vulnerabilities:

  - This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7,     macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data. (CVE-2025-43308)

  - A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and     3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and     a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however,     for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is     stringio 3.0.1.2. (CVE-2024-27280)

  - A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma     14.8, macOS Tahoe 26. An app may be able to access sensitive user data. (CVE-2025-24197)

  - An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and     iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able     to access sensitive user data. (CVE-2025-31255)

  - A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS     Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to capture a screenshot of an app     entering or exiting full screen mode. (CVE-2025-31259)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of AOS installed on the remote host is prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1 advisory.

  - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data     corruption.) NOTE: the vendor states only a few specific / uncommon usages of the API are at risk.
    (CVE-2019-17543)

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - Allows modifying some file metadata (e.g. last modified) with filter=data or file permissions (chmod)     with filter=tar of files outside the extraction directory. You are affected by this vulnerability if     using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract()     using the filter= parameter with a value of data or tar. See the tarfile extraction filters     documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more     information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions     don't include the extraction filter feature. Note that for Python 3.14 or later the default value of     filter= changed from no filtering to `data, so if you are relying on this new default behavior then     your usage is also affected. Note that none of these vulnerabilities significantly affect the installation     of source distributions which are tar archives as source distributions already allow arbitrary code     execution during the build process. However when evaluating source distributions it's important to avoid     installing source distributions with suspicious links. (CVE-2024-12718)

  - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata. You are affected by this vulnerability if using the     tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the     filter= parameter with a value of data or tar. See the tarfile extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Note that     for Python 3.14 or later the default value of filter= changed from no filtering to `data, so if you     are relying on this new default behavior then your usage is also affected. Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links. (CVE-2025-4138, CVE-2025-4330)

  - When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any     filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0     in affected versions is that the member would still be extracted and not skipped. (CVE-2025-4435)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to AHV-10.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1 advisory.

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data     corruption.) NOTE: the vendor states only a few specific / uncommon usages of the API are at risk.
    (CVE-2019-17543)

  - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under     certain circumstances when the XML schematron has the <sch:name path=.../> schema elements. This flaw     allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the     program's crash using libxml or other possible undefined behaviors. (CVE-2025-49794)

  - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can     trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that     can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to     sensitive data being corrupted in memory. (CVE-2025-49796)

  - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations     can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of     service when processing crafted input. (CVE-2025-6021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to AHV-11.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0 advisory.

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings     in tinfo/read_entry.c in the terminfo library. (CVE-2022-29458)

  - Allows modifying some file metadata (e.g. last modified) with filter=data or file permissions (chmod)     with filter=tar of files outside the extraction directory. You are affected by this vulnerability if     using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract()     using the filter= parameter with a value of data or tar. See the tarfile extraction filters     documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more     information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions     don't include the extraction filter feature. Note that for Python 3.14 or later the default value of     filter= changed from no filtering to `data, so if you are relying on this new default behavior then     your usage is also affected. Note that none of these vulnerabilities significantly affect the installation     of source distributions which are tar archives as source distributions already allow arbitrary code     execution during the build process. However when evaluating source distributions it's important to avoid     installing source distributions with suspicious links. (CVE-2024-12718)

  - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata. You are affected by this vulnerability if using the     tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the     filter= parameter with a value of data or tar. See the tarfile extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Note that     for Python 3.14 or later the default value of filter= changed from no filtering to `data, so if you     are relying on this new default behavior then your usage is also affected. Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links. (CVE-2025-4138, CVE-2025-4330)

  - When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any     filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0     in affected versions is that the member would still be extracted and not skipped. (CVE-2025-4435)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
249288	EulerOS 2.0 SP11 : perl (EulerOS-SA-2025-1938)	Nessus	Huawei Local Security Checks	8/14/2025	8/14/2025	medium
265371	macOS 26.x < 26.0 Multiple Vulnerabilities (125110)	Nessus	MacOS X Local Security Checks	9/18/2025	1/21/2026	high
238027	Amazon Linux AMI : perl (ALAS-2025-1981)	Nessus	Amazon Linux Local Security Checks	6/9/2025	6/9/2025	medium
279324	EulerOS Virtualization 2.13.0 : perl (EulerOS-SA-2025-2592)	Nessus	Huawei Local Security Checks	12/18/2025	12/18/2025	medium
279329	EulerOS Virtualization 2.13.1 : perl (EulerOS-SA-2025-2557)	Nessus	Huawei Local Security Checks	12/18/2025	12/18/2025	medium
282858	MiracleLinux 8 : perl-5.26.3-423.el8_10 (AXSA:2025-10629:10)	Nessus	Miracle Linux Local Security Checks	1/13/2026	1/13/2026	medium
302555	EulerOS Virtualization 2.12.0 : perl (EulerOS-SA-2026-1509)	Nessus	Huawei Local Security Checks	3/16/2026	3/16/2026	medium
307485	Oracle Linux 8 : perl:5.32 (ELSA-2026-8096)	Nessus	Oracle Linux Local Security Checks	4/19/2026	4/19/2026	medium
264811	macOS 14.x < 14.8 Multiple Vulnerabilities (125112)	Nessus	MacOS X Local Security Checks	9/15/2025	5/26/2026	critical
269907	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1)	Nessus	Misc.	10/9/2025	4/2/2026	high
269975	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1)	Nessus	Misc.	10/10/2025	10/10/2025	high
278723	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0)	Nessus	Misc.	12/15/2025	5/26/2026	high

Detections

Analytics

Plugins Search

medium

high

medium

medium

medium

medium

medium

medium

critical

high

high

high