The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23932 advisory.

    The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

    Security Fix(es):

    * httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)

    * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)

    * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23732 advisory.

    * httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)

    * mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)

    * httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)

    * httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23919 advisory.

    - Resolves: RHEL-135063 - httpd: Apache HTTP Server: mod_userdir+suexec bypass       via AllowOverride FileInfo (CVE-2025-66200)
    - Resolves: RHEL-135048 - httpd: Apache HTTP Server: CGI environment variable       override (CVE-2025-65082)
    - Resolves: RHEL-134480 - httpd: Apache HTTP Server: Server Side Includes adds       query string to #exec cmd=... (CVE-2025-58098)
    - Resolves: RHEL-125884 - mod_ssl: allow more fine grained SSL SNI vhost check       to avoid unnecessary 421 errors after CVE-2025-23048 fix

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.5. It is, therefore, affected by multiple vulnerabilities:

  - A path handling issue was addressed with improved logic. This issue is fixed in Safari 26.3, iOS 18.7.5     and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3,     visionOS 26.3. A remote user may be able to write arbitrary files. (CVE-2026-20660)

  - When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol     redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the     bearer token to the new target host. (CVE-2025-14524)

  - An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30     days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then     are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before     2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. (CVE-2025-55753)

  - Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not     mod_cgi) passes the shell-escaped query string to #exec cmd=... directives. This issue affects Apache     HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue.
    (CVE-2025-58098)

  - Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes     On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and     malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.
    (CVE-2025-59775)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
279570	RHEL 10 : httpd (RHSA-2025:23932)	Nessus	Red Hat Local Security Checks	12/22/2025	12/22/2025	high
279511	RockyLinux 8 : httpd:2.4 (RLSA-2025:23732)	Nessus	Rocky Linux Local Security Checks	12/22/2025	12/24/2025	high
279632	Oracle Linux 9 : httpd (ELSA-2025-23919)	Nessus	Oracle Linux Local Security Checks	12/23/2025	12/23/2025	high
303478	macOS 15.x < 15.7.5 Multiple Vulnerabilities (126795)	Nessus	MacOS X Local Security Checks	3/24/2026	5/11/2026	high

Detections

Analytics

Plugins Search

high

high

high

high