The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-491:09 advisory.

    * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
      * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
      * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
      * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw     (CVE-2026-32178)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities:

  - Stack-based buffer overflow in .NET and Visual Studio allows an      unauthorized attacker to deny service over a network. (CVE-2026-32203)

  - Improper neutralization of special elements in .NET allows an      unauthorized attacker to perform spoofing over a network. (CVE-2026-32178)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:8469 advisory.

    * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
      * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
      * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
      * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw     (CVE-2026-32178)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8467 advisory.

    * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

    * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

    * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

    * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw     (CVE-2026-32178)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8473 advisory.

    * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

    * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

    * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

    * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw     (CVE-2026-32178)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8469 advisory.

    * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)

    * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)

    * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)

    * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw     (CVE-2026-32178)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-472:08 advisory.

    * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
      * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
      * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
      * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw     (CVE-2026-32178)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-471:07 advisory.

    * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
      * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
      * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
      * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw     (CVE-2026-32178)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-482:07 advisory.

    * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
      * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
      * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
      * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw     (CVE-2026-32178)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-97fbaaef10 advisory.

    Update to .NET SDK 9.0.116 and Runtime 9.0.15

    Fixes: CVE-2026-26171, CVE-2026-32178, CVE-2026-32203, CVE-2026-33116

    Release Notes:

    - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.15/9.0.116.md
    - Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.15/9.0.15.md

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ac43e01af9 advisory.

    Update to .NET SDK 9.0.116 and Runtime 9.0.15

    Fixes: CVE-2026-26171, CVE-2026-32178, CVE-2026-32203, CVE-2026-33116

    Release Notes:

    - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.15/9.0.116.md
    - Runtime: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.15/9.0.15.md

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the dotnet package has been released.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-484:08 advisory.

    * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
      * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
      * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
      * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw     (CVE-2026-32178)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
310049	MiracleLinux 8 : dotnet10.0-10.0.106-1.el8_10 (AXSA:2026-491:09)	Nessus	Miracle Linux Local Security Checks	4/24/2026	5/7/2026	high
307352	Microsoft Visual Studio Products (April 2026)	Nessus	Windows : Microsoft Bulletins	4/17/2026	5/8/2026	high
307374	AlmaLinux 9 : .NET 8.0 (ALSA-2026:8469)	Nessus	Alma Linux Local Security Checks	4/17/2026	5/7/2026	high
307465	RockyLinux 10 : .NET 10.0 (RLSA-2026:8467)	Nessus	Rocky Linux Local Security Checks	4/18/2026	5/7/2026	high
307471	RockyLinux 8 : .NET 10.0 (RLSA-2026:8473)	Nessus	Rocky Linux Local Security Checks	4/18/2026	5/7/2026	high
307478	RockyLinux 9 : .NET 8.0 (RLSA-2026:8469)	Nessus	Rocky Linux Local Security Checks	4/18/2026	5/7/2026	high
307678	MiracleLinux 9 : dotnet10.0-10.0.106-1.el9_7.ML.1 (AXSA:2026-472:08)	Nessus	Miracle Linux Local Security Checks	4/21/2026	5/7/2026	high
307684	MiracleLinux 9 : dotnet9.0-9.0.116-1.el9_7.ML.1 (AXSA:2026-471:07)	Nessus	Miracle Linux Local Security Checks	4/21/2026	5/7/2026	high
308171	MiracleLinux 9 : dotnet8.0-8.0.126-1.el9_7.ML.1 (AXSA:2026-482:07)	Nessus	Miracle Linux Local Security Checks	4/21/2026	5/7/2026	high
311381	Fedora 43 : dotnet9.0 (2026-97fbaaef10)	Nessus	Fedora Local Security Checks	5/1/2026	5/7/2026	high
311393	Fedora 42 : dotnet9.0 (2026-ac43e01af9)	Nessus	Fedora Local Security Checks	5/1/2026	5/7/2026	high
313030	Photon OS 5.0: Dotnet PHSA-2026-5.0-0842	Nessus	PhotonOS Local Security Checks	5/7/2026	5/7/2026	medium
309111	MiracleLinux 8 : dotnet8.0-8.0.126-1.el8_10.ML.1 (AXSA:2026-484:08)	Nessus	Miracle Linux Local Security Checks	4/22/2026	5/7/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

medium

high