There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  CVE-2026-88812, CVE-2026-93515, CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520,
  CVE-2026-93521, CVE-2026-93522, CVE-2026-93523, CVE-2026-93524, CVE-2026-93536


The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2448dda850 advisory.

    Update to xwayland 24.1.14     CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516     CVE-2026-93517, CVE-2026-93518, CVE-2026-93519,     CVE-2026-93520, CVE-2026-93521, CVE-2026-93522,     CVE-2026-93523, CVE-2026-93524, CVE-2026-93536

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 06bf834f-c31f-11f1-9b94-901b0e13f1a0 advisory.

    X.Org reports:
    Multiple issues have been found in the X server and Xwayland implementations                 published by X.Org for which we are releasing security fixes for in                 xorg-server-21.1.25 and xwayland-24.1.14.
                CVE-2026-88812: XKB SetGeometry TextDoodad Double Free                 CVE-2026-93515: Present Extension Cross-Window Notify Use-After-Free                 CVE-2026-93516: XInput Passive Grab modifierDevice Use-After-Free                 CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow                 CVE-2026-93518: XKB ResizeKeyType Numeric Truncation                 CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow                 CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write                 CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow                 CVE-2026-93522: Glamor CopyArea CPU-FBO Heap Buffer Overflow                 CVE-2026-93523: XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write                 CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read                 CVE-2026-93536: GestureBuildSprite Use-After-Free


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
473835	Alpine: multiple xorg-server packages: security update to 21.1.25-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/8/2026	10/8/2026	critical
473835	Alpine: multiple xorg-server packages: security update to 21.1.25-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/8/2026	10/8/2026	critical
473645	Alpine: multiple xwayland packages: security update to 24.1.14-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/7/2026	10/7/2026	critical
473645	Alpine: multiple xwayland packages: security update to 24.1.14-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/7/2026	10/7/2026	critical
364336	Fedora 44 : xorg-x11-server-Xwayland (2026-2448dda850)	Nessus	Fedora Local Security Checks	10/9/2026	10/9/2026	high
364284	FreeBSD : xorg -- Multiple vulnerabilities (06bf834f-c31f-11f1-9b94-901b0e13f1a0)	Nessus	FreeBSD Local Security Checks	10/8/2026	10/8/2026	high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

high

high