There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A WebFlux server application that processes multipart requests creates temp files for parts larger than 10
    K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This
    allows an attacker to consume available disk space. Older, unsupported versions are also affected.
    (CVE-2026-22740)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A WebFlux server application that processes multipart requests creates temp files for parts larger than 10     K. Under some circumstances, temp files may remain not deleted after the request is fully processed. This     allows an attacker to consume available disk space. Older, unsupported versions are also affected.
    (CVE-2026-22740)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of AOS installed on the remote host is prior to 7.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.6 advisory.

  - NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator     that enables denial of service and possible remote code execution as a result of deep copying a data     structure and erroneously overwriting a destination pointer. An adversary can exploit the vulnerability by     controlling a malicious signed zone and querying a vulnerable Unbound. When DS sub-queries need to suspend     validation due to NSEC3 computational budget exhaustion (introduced in Unbound 1.19.1), Unbound deep-     copies response messages to preserve them across memory region teardown. A struct-assignment bug     overwrites the destination's pointer with the source's pointer. After the sub-query region is freed, the     resumed validator dereferences this dangling pointer, triggering a crash or potentially enabling arbitrary     code execution. Unbound 1.25.1 contains a patch with a fix to preserve the correct pointer when deep     copying the data structure. (CVE-2026-33278)

  - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in     the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow.
    The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The     identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended     to deploy a patch. The code maintainer replied with [f]ixed for 2.46. (CVE-2025-11083)

  - A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in     the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable     characters (which would need escaping), the calculation of the length of the escaped string could     overflow, leading to a potential write off the end of the newly allocated string. (CVE-2025-13601)

  - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1552 contains a patch for the vulnerability. (CVE-2025-53905)

  - Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in     Vim's zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1551 contains a patch for the vulnerability. (CVE-2025-53906)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Spring Framework installed on the remote host is 5.3.x prior to 5.3.48, 6.1.x prior to 6.1.27, 6.2.x prior to 6.2.18, or 7.0.x prior to 7.0.7. It is, therefore, affected by multiple vulnerabilities:

  - A WebFlux server application that processes multipart requests creates temp files for parts larger than 10K. Under     some circumstances, temp files may remain not deleted after the request is fully processed, allowing an attacker to     consume available disk space. (CVE-2026-22740)

  - Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources with caching     and encoded resources resolution enabled. An attacker can poison the resource cache with resources using the wrong     encoding, causing a denial of service. (CVE-2026-22741)

  - Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources from     the file system on Windows platforms. An attacker can send malicious requests that are slow to resolve and that can     keep HTTP connections in use. (CVE-2026-22745)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
441423	SCA: security update for org.springframework:spring-webflux (GHSA-5843-p793-ghmm)	Tenable Cloud Security	SCA Checks	5/7/2026	7/2/2026	medium
441423	SCA: security update for org.springframework:spring-webflux (GHSA-5843-p793-ghmm)	Tenable Self-Hosted Container Security	SCA Checks	5/7/2026	7/2/2026	medium
312216	Linux Distros Unpatched Vulnerability : CVE-2026-22740	Nessus	Misc.	5/5/2026	9/2/2026	medium
328839	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6)	Nessus	Misc.	7/21/2026	8/24/2026	critical
314917	Spring Framework 5.3.x < 5.3.48 / 6.1.x < 6.1.27 / 6.2.x < 6.2.18 / 7.0.x < 7.0.7 Multiple DoS	Nessus	Misc.	5/15/2026	5/18/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

critical

medium