The version of net-snmp installed on the remote host is prior to 5.9.3 / 5.9.5.2. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-359-01 advisory.

    New net-snmp packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the net-snmp security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0926 advisory.

    [1:5.7.2-49.0.3]
    - Fix out of bound access [Orabug: 38873509][CVE-2025-68615]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0850 advisory.

    The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol     (SNMP), including an SNMP library, an extensible agent, tools for requesting or setting information from     SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command which uses     SNMP, and a Tk/Perl Management Information Base (MIB) browser.

    Security Fix(es):

    * net-snmp: buffer overflow via a specially crafted packet can cause a crash in snmptrapd (CVE-2025-68615)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of net-snmp installed on the remote host is prior to 5.7.2-49. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3124 advisory.

    net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a     specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to     crash. This issue has been patched in versions 5.9.5 and 5.10.pre2. (CVE-2025-68615)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0195-1 advisory.

    - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a     specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to     crash. This issue has been patched in versions 5.9.5 and 5.10.pre2.(CVE-2025-68615)

Tenable has extracted the preceding description block directly from the EulerOS net-snmp security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.0.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0.1.14 advisory.

  - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in     the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow.
    The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The     identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended     to deploy a patch. The code maintainer replied with [f]ixed for 2.46. (CVE-2025-11083)

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read     vulnerability exists in png_image_read_composite when processing palette images with     PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly     applies background compositing during premultiplication, violating the invariant component  alpha  257     required by the simplified PNG API. This issue has been patched in version 1.6.51. (CVE-2025-64720)

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow     vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit     interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond     allocated buffer bounds. This issue has been patched in version 1.6.51. (CVE-2025-65018)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u471,     8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9;
    Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE,     Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be     exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the     APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web     Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from     the internet) and rely on the Java sandbox for security. (CVE-2026-21925)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u471,     8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9;
    Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than     the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition, attacks may significantly impact additional products (scope change). Successful     attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle     Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized     read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition     accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g.,     through a web service which supplies data to the APIs. This vulnerability also applies to Java     deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets,     that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox     for security. (CVE-2026-21933)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
279981	Slackware Linux 15.0 / current net-snmp Vulnerability (SSA:2025-359-01)	Nessus	Slackware Local Security Checks	12/25/2025	2/20/2026	critical
297752	Oracle Linux 7 : net-snmp (ELSA-2026-0926)	Nessus	Oracle Linux Local Security Checks	2/3/2026	2/3/2026	critical
294850	RHEL 8 : net-snmp (RHSA-2026:0850)	Nessus	Red Hat Local Security Checks	1/21/2026	1/21/2026	critical
294895	Amazon Linux 2 : net-snmp, --advisory ALAS2-2026-3124 (ALAS-2026-3124)	Nessus	Amazon Linux Local Security Checks	1/21/2026	1/21/2026	critical
294923	SUSE SLES12 Security Update : net-snmp (SUSE-SU-2026:0195-1)	Nessus	SuSE Local Security Checks	1/22/2026	1/22/2026	critical
301602	EulerOS 2.0 SP13 : net-snmp (EulerOS-SA-2026-1255)	Nessus	Huawei Local Security Checks	3/10/2026	3/10/2026	critical
302386	EulerOS 2.0 SP10 : net-snmp (EulerOS-SA-2026-1318)	Nessus	Huawei Local Security Checks	3/16/2026	3/16/2026	critical
302412	EulerOS 2.0 SP12 : net-snmp (EulerOS-SA-2026-1406)	Nessus	Huawei Local Security Checks	3/16/2026	3/16/2026	critical
302430	EulerOS 2.0 SP10 : net-snmp (EulerOS-SA-2026-1344)	Nessus	Huawei Local Security Checks	3/16/2026	3/16/2026	critical
300502	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1.14)	Nessus	Misc.	3/4/2026	4/7/2026	medium

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium