The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2581-1 advisory.

    - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2024-45337: Update golang.org/x/crypto/ssh dependency (bsc#1234563).
    - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266603).
    - CVE-2023-45288: Update golang.org/x/net/http2 dependency (bsc#1236533).
    - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1239334).
    - CVE-2025-22869: Update golang.org/x/crypto dependency (bsc#1253889).
    - CVE-2026-33814: Update golang.org/x/net/http2 dependency (bsc#1265762).
    - CVE-2026-33186: Update google.golang.org/grpc dependency (bsc#1260264).
    - CVE-2026-34986: Fix crafted JWE input with a missing encrypted key can lead to a denial of service     (bsc#1262926).

    Bug fixes:

    - Update to version 20260402.00 (bsc#1257010).
    - Update to version 20250506.01 (bsc#1243254, bsc#1243505).
    - Install google_metadata_script_runner_adapt script (bsc#1245759).
    - Add -buildmode=pie to go build command line (bsc#1239944).
    - Re-enable binary stripping and debuginfo (bsc#1210938).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
323027	SUSE SLES12 Security Update : google-guest-agent (SUSE-SU-2026:2581-1)	Nessus	SuSE Local Security Checks	6/26/2026	6/26/2026	high
310201	openSUSE 16 Security Update : rclone (openSUSE-SU-2026:20620-1)	Nessus	SuSE Local Security Checks	4/25/2026	4/28/2026	critical

Detections

Analytics

Plugins Search

high

critical