The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:64772 advisory.

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61316 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1743:01 advisory.

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3572-1 advisory.

    This update for xmlrpc-c fixes the following issue:

    - CVE-2026-15928: reflected cross-site scripting (XSS) via HTML injection in the error page component     (bsc#1272769).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21633-1 advisory.

    This update for xmlrpc-c fixes the following issue

    - CVE-2026-15928: Xreflected cross-site scripting (XSS) vulnerability in the error page component     (bsc#1272769).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61232 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61236 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61234 advisory.

    XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a     transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a     simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to     a remote server using HTTP, and gets back the response in XML.

    Security Fix(es):

    * xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-613160 advisory.

    [1.51.0-17]
    - Fix HTML injection in Abyss error responses and directory listings
    - Resolves: CVE-2026-15928

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
343828	AlmaLinux 8 : xmlrpc-c (ALSA-2026:64772)	Nessus	Alma Linux Local Security Checks	9/8/2026	9/8/2026	high
341713	RHEL 9 : xmlrpc-c (RHSA-2026:61316)	Nessus	Red Hat Local Security Checks	8/31/2026	8/31/2026	high
342595	MiracleLinux 9 : xmlrpc-c-1.51.0-17.el9_8 (AXSA:2026-1743:01)	Nessus	Miracle Linux Local Security Checks	9/3/2026	9/3/2026	high
335099	SUSE SLED15: libxmlrpc++8 / libxmlrpc3 / libxmlrpc_abyss++8 / libxmlrpc_abyss3 / etc (SUSE-SU-2026:3572-1)	Nessus	SuSE Local Security Checks	8/13/2026	8/13/2026	high
341161	openSUSE 16: libxmlrpc++8 / libxmlrpc3 / libxmlrpc_abyss++8 / libxmlrpc_abyss3 / etc (openSUSE-SU-2026:21633-1)	Nessus	SuSE Local Security Checks	8/28/2026	8/28/2026	high
341631	RHEL 9 : xmlrpc-c (RHSA-2026:61232)	Nessus	Red Hat Local Security Checks	8/31/2026	8/31/2026	high
341635	RHEL 8 : xmlrpc-c (RHSA-2026:61236)	Nessus	Red Hat Local Security Checks	8/31/2026	8/31/2026	high
341703	RHEL 7 : xmlrpc-c (RHSA-2026:61234)	Nessus	Red Hat Local Security Checks	8/31/2026	8/31/2026	high
342291	Oracle Linux 9 : ELSA-2026-61316-0: / xmlrpc-c (ELSA-2026-613160)	Nessus	Oracle Linux Local Security Checks	9/2/2026	9/2/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high