There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1,
    a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process
    using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue. (CVE-2026-32952)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1,     a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process     using `ntlmssp.Negotiator` as an HTTP transport. Version 0.1.1 patches the issue. (CVE-2026-32952)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
440792	SCA: security update for github.com/Azure/go-ntlmssp (GHSA-pjcq-xvwq-hhpj)	Tenable Cloud Security	SCA Checks	4/24/2026	7/2/2026	high
440792	SCA: security update for github.com/Azure/go-ntlmssp (GHSA-pjcq-xvwq-hhpj)	Tenable Self-Hosted Container Security	SCA Checks	4/24/2026	7/2/2026	high
310392	Linux Distros Unpatched Vulnerability : CVE-2026-32952	Nessus	Misc.	4/27/2026	7/5/2026	high
329722	openSUSE 16 Security Update : rclone (openSUSE-SU-2026:21436-1)	Nessus	SuSE Local Security Checks	7/25/2026	8/14/2026	critical

Detections

Analytics

Plugins Search

high

high

high

critical