The version of AHV installed on the remote host is prior to AHV-10.3.1.4. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.4 advisory.

  - In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is     intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are     fixed versions.) (CVE-2025-68973)

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read     vulnerability exists in png_image_read_composite when processing palette images with     PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly     applies background compositing during premultiplication, violating the invariant component  alpha  257     required by the simplified PNG API. This issue has been patched in version 1.6.51. (CVE-2025-64720)

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow     vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit     interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond     allocated buffer bounds. This issue has been patched in version 1.6.51. (CVE-2025-65018)

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's     simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid     palette PNG images with partial transparency and gamma correction. The PNG files that trigger this     vulnerability are valid per the PNG specification; the bug is in libpng's internal state management.
    Upgrade to libpng 1.6.52 or later. (CVE-2025-66293)

  - Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can     trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which     leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which     can have various consequences including a Denial of Service or Execution of attacker-supplied code.
    Although the consequences of a successful exploit of this vulnerability could be severe, the probability     that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in     CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to     our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue,     as the CMS implementation is outside the OpenSSL FIPS module boundary. (CVE-2025-9230)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1229 advisory.

    The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures,     compliant with OpenPGP and S/MIME standards.

    Security Fix(es):

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the gnupg package has been released.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0728 advisory.

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0974 advisory.

    The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures,     compliant with OpenPGP and S/MIME standards.

    Security Fix(es):

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:0719 advisory.

    * GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write     (CVE-2025-68973)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
300398	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.4)	Nessus	Misc.	3/3/2026	3/3/2026	high
296617	RHEL 9 : gnupg2 (RHSA-2026:1229)	Nessus	Red Hat Local Security Checks	1/26/2026	1/30/2026	high
297256	Photon OS 5.0: Gnupg PHSA-2026-5.0-0737	Nessus	PhotonOS Local Security Checks	1/30/2026	1/30/2026	high
291290	RockyLinux 8 : gnupg2 (RLSA-2026:0728)	Nessus	Rocky Linux Local Security Checks	1/17/2026	1/30/2026	high
294975	RHEL 8 : gnupg2 (RHSA-2026:0974)	Nessus	Red Hat Local Security Checks	1/22/2026	1/30/2026	high
288866	AlmaLinux 9 : gnupg2 (ALSA-2026:0719)	Nessus	Alma Linux Local Security Checks	1/16/2026	1/30/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high