As information about new vulnerabilities is discovered and released into the general public domain, Tenable Research designs programs to detect them. These programs are named plugins and are written in the Nessus Attack Scripting Language (NASL). The plugins contain vulnerability information, a simplified set of remediation actions and the algorithm to test for the presence of the security issue. Tenable Research has published 324528 plugins, covering 118328 CVE IDs and 30933 Bugtraq IDs.
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 310144 | Tenable Nessus Agent < 11.1.3 Arbitrary File Deletion (TNS-2026-12) | Nessus | Windows | high |
| 310143 | Splunk Enterprise 9.1.x < 9.1.8 / 9.2.x < 9.2.5 / 9.3.x < 9.3.3 / 9.4.x < 9.4.1 Multiple Vulnerabilities (SVD-2025-0308) | Nessus | CGI abuses | high |
| 310142 | RHEL 9 : buildah (RHSA-2026:10135) | Nessus | Red Hat Local Security Checks | high |
| 310141 | Ubuntu 18.04 LTS : OpenMPT vulnerability (USN-8206-1) | Nessus | Ubuntu Local Security Checks | critical |
| 310140 | Cisco DNA Spaces Connector Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024) | Nessus | CISCO | high |
| 310139 | Oracle GoldenGate for Big Data 19.1.x < 19.1.0.0.23 (April 2026 CPU) | Nessus | Misc. | high |
| 310138 | Oracle GoldenGate for Big Data Multiple Vulnerabilities 23.x < 23.26.2.0.0 (April 2026 CPU) | Nessus | Misc. | medium |
| 310137 | Oracle GoldenGate for Big Data Multiple Vulnerabilities 21.x < 21.22.0.0.0 (April 2026 CPU) | Nessus | Misc. | medium |
| 310136 | Oracle Database Server (April 2026 CPU) | Nessus | Databases | high |
| 310135 | Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2025-0015) | Nessus | Windows | high |
| 310134 | Cisco Identity Services Engine Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024) | Nessus | CISCO | high |
| 310133 | Oracle Linux 10 : golang (ELSA-2026-10217) | Nessus | Oracle Linux Local Security Checks | critical |
| 310132 | Oracle Linux 10 : grafana (ELSA-2026-10223) | Nessus | Oracle Linux Local Security Checks | high |
| 310131 | Anthropic Claude Code < 2.1.64 Sandbox Escape via Symlink Following (CVE-2026-39861) | Nessus | Misc. | high |
| 310130 | MiracleLinux 9 : osbuild-composer-149-5.el9_7.ML.1 (AXSA:2026-493:06) | Nessus | Miracle Linux Local Security Checks | high |
| 310129 | MiracleLinux 8 : giflib-5.1.4-4.el8_10 (AXSA:2026-498:02) | Nessus | Miracle Linux Local Security Checks | medium |
| 310128 | Linux Distros Unpatched Vulnerability : CVE-2026-41044 | Nessus | Misc. | critical |
| 310127 | Linux Distros Unpatched Vulnerability : CVE-2026-41043 | Nessus | Misc. | critical |
| 310126 | Linux Distros Unpatched Vulnerability : CVE-2026-40466 | Nessus | Misc. | critical |
| 310125 | Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Slurm vulnerability (USN-8197-1) | Nessus | Ubuntu Local Security Checks | high |
| 310124 | Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8203-1) | Nessus | Ubuntu Local Security Checks | high |
| 310123 | Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : jq vulnerabilities (USN-8202-1) | Nessus | Ubuntu Local Security Checks | medium |
| 310122 | Ubuntu Pro Realtime 24.04 LTS : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-8204-1) | Nessus | Ubuntu Local Security Checks | high |
| 310121 | RHEL 10 / 8 / 9 : java-21-openjdk (RHSA-2026:9689) | Nessus | Red Hat Local Security Checks | high |
| 310120 | RHEL 8 / 9 : java-1.8.0-openjdk (RHSA-2026:9683) | Nessus | Red Hat Local Security Checks | high |
| 310119 | RockyLinux 10 : thunderbird (RLSA-2026:9638) | Nessus | Rocky Linux Local Security Checks | critical |
| 310118 | RockyLinux 9 : webkit2gtk3 (RLSA-2026:9692) | Nessus | Rocky Linux Local Security Checks | medium |
| 310117 | RockyLinux 10 : wireshark (RLSA-2026:9666) | Nessus | Rocky Linux Local Security Checks | high |
| 310116 | Microsoft ASP.NET (April 2026) | Nessus | Windows : Microsoft Bulletins | critical |
| 310115 | Oracle Business Process Management Suite (14.1.2.0.0) (April 2026 CPU) | Nessus | Misc. | medium |
| 310114 | Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (April 2026 CPU) | Nessus | Misc. | high |
| 310113 | Oracle Business Process Management Suite (12.2.1.4.0) (April 2026 CPU) | Nessus | Misc. | high |
| 310112 | Mattermost Server 10.11.x <= 10.11.13 / 11.3.x < 11.3.3 / 11.4.x < 11.4.3 / 11.5.x < 11.5.1 / 11.6.0 Multiple Vulnerabilities (MMSA-2026-00624 / MMSA-2026-00625) | Nessus | CGI abuses | medium |
| 310111 | Mattermost Server 10.11.x < 10.11.13 Improper Validation (MMSA-2026-00603) | Nessus | CGI abuses | low |
| 310110 | IBM DB2 Federated Server DoS (7269435) (Windows) | Nessus | Databases | medium |
| 310109 | IBM DB2 Multiple DoS (7269433, 7269434, 7269424, 7267642) (Unix) | Nessus | Databases | medium |
| 310108 | IBM DB2 Federated Server DoS (7269435) (Unix) | Nessus | Databases | medium |
| 310107 | IBM DB2 Multiple DoS (7269433, 7269434, 7269424, 7267642) (Windows) | Nessus | Databases | medium |
| 310106 | Oracle VM VirtualBox (April 2026 CPU) | Nessus | Misc. | high |
| 310105 | Cisco IOS XE Software IOx Application Hosting Environment CRLF Injection (cisco-sa-iox-crlf-NvgKTKJZ) | Nessus | CISCO | medium |
| 310104 | RHEL 8 / 9 : java-17-openjdk (RHSA-2026:9686) | Nessus | Red Hat Local Security Checks | high |
| 310103 | RHEL 9 : grafana (RHSA-2026:10226) | Nessus | Red Hat Local Security Checks | high |
| 310102 | Photon OS 5.0: Openssh PHSA-2026-5.0-0830 | Nessus | PhotonOS Local Security Checks | high |
| 310101 | Photon OS 5.0: Xz PHSA-2026-5.0-0830 | Nessus | PhotonOS Local Security Checks | medium |
| 310100 | Photon OS 5.0: Linux PHSA-2026-5.0-0830 | Nessus | PhotonOS Local Security Checks | medium |
| 310099 | Photon OS 4.0: Openssh PHSA-2026-4.0-1002 | Nessus | PhotonOS Local Security Checks | high |
| 310098 | Photon OS 4.0: Linux PHSA-2026-4.0-1002 | Nessus | PhotonOS Local Security Checks | high |
| 310097 | Photon OS 5.0: Protobuf PHSA-2026-5.0-0825 | Nessus | PhotonOS Local Security Checks | high |
| 310096 | Photon OS 4.0: Expat PHSA-2026-4.0-1002 | Nessus | PhotonOS Local Security Checks | medium |
| 310095 | Photon OS 4.0: Sudo PHSA-2026-4.0-1002 | Nessus | PhotonOS Local Security Checks | high |
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 97085 | Microsoft Office Unsupported Channel Version Detection | Nessus | Windows | critical |
| 92756 | Set Reporting Items for Nessus Agents | Nessus | Settings | info |
| 71644 | Oracle Database Patch Info (credentialed check) | Nessus | Databases | info |
| 56998 | Microsoft Office Unsupported Version Detection | Nessus | Windows | critical |
| 45624 | Oracle RDBMS Host Name and Patch Info | Nessus | Databases | info |
| 310046 | Linux Distros Unpatched Vulnerability : CVE-2026-6732 | Nessus | Misc. | medium |
| 309965 | Oracle Business Intelligence Enterprise Edition (OAS 7.6) (April 2026 CPU) | Nessus | Misc. | high |
| 309964 | Oracle Business Intelligence Enterprise Edition (OAS 8.2) (April 2026 CPU) | Nessus | Misc. | high |
| 309925 | Oracle Primavera Unifier (April 2026 CPU) | Nessus | CGI abuses | medium |
| 309920 | Oracle Application Testing Suite (April 2026 CPU) | Nessus | Misc. | high |
| 309919 | Oracle WebLogic Server (April 2026 CPU) | Nessus | Misc. | high |
| 309918 | Oracle WebLogic Server Unauthorized Access (April 2026 CPU) | Nessus | Misc. | high |
| 309917 | Oracle WebLogic Server Multiple Vulnerabilities (April 2026 CPU) | Nessus | Misc. | high |
| 309899 | Oracle MySQL Server 8.4.x < 8.4.9 (April 2026 CPU) | Nessus | Databases | critical |
| 309898 | Oracle MySQL Server 9.x.x < 9.7.0 (April 2026 CPU) | Nessus | Databases | critical |
| 309897 | Oracle MySQL Server 8.0.x < 8.0.46 (April 2026 CPU) | Nessus | Databases | critical |
| 309896 | Zimbra Collaboration Server 8.8.15 < 8.8.15 Patch 47, 9.x < 9.0.0 Patch 43, 10.0.x < 10.0.12, 10.1.x < 10.1.4 XSS | Nessus | CGI abuses : XSS | medium |
| 309743 | FreeBSD : FreeBSD -- Missing large page handling in pmap_pkru_update_range() (128951d0-3df0-11f1-bb07-bc241121aa0a) | Nessus | FreeBSD Local Security Checks | medium |
| 309742 | FreeBSD : FreeBSD -- Kernel use-after-free bug in the TIOCNOTTY handler (971b5528-3def-11f1-bb07-bc241121aa0a) | Nessus | FreeBSD Local Security Checks | high |
| 309713 | Linux Distros Unpatched Vulnerability : CVE-2026-41651 | Nessus | Misc. | high |
| 309675 | Apple iOS < 18.7.8 Vulnerability (127003) | Nessus | Mobile Devices | medium |
| 309674 | Apple iOS < 26.4.2 Vulnerability (127002) | Nessus | Mobile Devices | medium |
| 309673 | GitLab 12.3 < 18.9.6 / 18.10 < 18.10.4 / 18.11 < 18.11.1 (CVE-2026-1660) | Nessus | CGI abuses | medium |
| 309672 | GitLab 18.11 < 18.11.1 (CVE-2026-5377) | Nessus | CGI abuses | medium |
| 309671 | GitLab 18.10 < 18.10.4 / 18.11 < 18.11.1 (CVE-2026-5816) | Nessus | CGI abuses | high |
| 309670 | GitLab 17.0 < 18.9.6 / 18.10 < 18.10.4 / 18.11 < 18.11.1 (CVE-2026-4922) | Nessus | CGI abuses | high |
| 309669 | GitLab 18.11 < 18.11.1 (CVE-2026-3254) | Nessus | CGI abuses | low |
| 309668 | GitLab 16.1.0 < 18.9.6 / 18.10 < 18.10.4 / 18.11 < 18.11.1 (CVE-2026-5262) | Nessus | CGI abuses | high |
| 309667 | GitLab 18.2 < 18.9.6 / 18.10 < 18.10.4 / 18.11 < 18.11.1 (CVE-2026-6515) | Nessus | CGI abuses | medium |
| 309645 | Linux Distros Unpatched Vulnerability : CVE-2026-22013 | Nessus | Misc. | medium |
| 309644 | Linux Distros Unpatched Vulnerability : CVE-2026-22018 | Nessus | Misc. | low |
| 309642 | Linux Distros Unpatched Vulnerability : CVE-2026-22016 | Nessus | Misc. | high |
| 309641 | Linux Distros Unpatched Vulnerability : CVE-2026-34282 | Nessus | Misc. | high |
| 309640 | Linux Distros Unpatched Vulnerability : CVE-2026-22007 | Nessus | Misc. | low |
| 309638 | Linux Distros Unpatched Vulnerability : CVE-2026-22021 | Nessus | Misc. | medium |
| 309637 | Linux Distros Unpatched Vulnerability : CVE-2026-34268 | Nessus | Misc. | low |
| 309197 | Oracle Java SE Multiple Vulnerabilities (April 2026 CPU) | Nessus | Misc. | high |
| 309143 | openSUSE 16 Security Update : qemu (openSUSE-SU-2026:20567-1) | Nessus | SuSE Local Security Checks | medium |
| 309101 | Mozilla Thunderbird < 140.10 | Nessus | MacOS X Local Security Checks | critical |
| 309100 | Mozilla Thunderbird < 150.0 | Nessus | Windows | critical |
| 309099 | Mozilla Thunderbird < 140.10 | Nessus | Windows | critical |
| 309098 | Mozilla Thunderbird < 150.0 | Nessus | MacOS X Local Security Checks | critical |
| 309052 | Linux Distros Unpatched Vulnerability : CVE-2026-40706 | Nessus | Misc. | high |
| 307899 | Mozilla Firefox < 150.0 | Nessus | Windows | critical |
| 307895 | Mozilla Firefox < 150.0 | Nessus | MacOS X Local Security Checks | critical |
| 307742 | Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: python3 (UTSA-2026-013021) | Nessus | Unity Linux Local Security Checks | medium |
| 307473 | Linux Distros Unpatched Vulnerability : CVE-2026-29013 | Nessus | Misc. | high |
| 307050 | Fedora 43 : util-linux (2026-840b40ef4c) | Nessus | Fedora Local Security Checks | medium |
| 306453 | Microsoft PowerShell 7.4.x < 7.4.14 / 7.5.x < 7.5.5 Security Feature Bypass (macOS) | Nessus | MacOS X Local Security Checks | high |
| 306442 | Microsoft PowerShell 7.4.x < 7.4.14 / 7.5.x < 7.5.5 Security Feature Bypass (April 2026) | Nessus | Windows : Microsoft Bulletins | high |