The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1a672925-de93-11f1-9824-6cc21735f730 advisory.

    The PostgreSQL project reports:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level     CREATE privilege to execute arbitrary code as the bootstrap superuser, via ALTER SCHEMA ... RENAME or     CREATE EXTENSION ... SCHEMA $user. ALTER EXTENSION was also affected. A trusted-extension script located     the wrong object and executed arbitrary SQL of the attacker's choice. Versions before PostgreSQL 18.7,     17.12, 16.16, 15.20, and 14.25 are affected. (CVE-2026-6467)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4905 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4905-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Santiago Ruano Rincn     November 14, 2026                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : postgresql-15     Version        : 15.20-0+deb12u1     CVE ID         : CVE-2026-6460 CVE-2026-6467 CVE-2026-14661 CVE-2026-16237                      CVE-2026-16240 CVE-2026-18447 CVE-2026-116303 CVE-2026-116304                      CVE-2026-116306 CVE-2026-116307 CVE-2026-116308 CVE-2026-116309                      CVE-2026-116311 CVE-2026-116312 CVE-2026-116314 CVE-2026-116315                      CVE-2026-116316 CVE-2026-116317 CVE-2026-116319 CVE-2026-116320                      CVE-2026-116321 CVE-2026-116323 CVE-2026-116326 CVE-2026-116327                      CVE-2026-116328 CVE-2026-116330 CVE-2026-116331 CVE-2026-116332                      CVE-2026-116335 CVE-2026-116336 CVE-2026-120139 CVE-2026-120141                      CVE-2026-120143 CVE-2026-120145 CVE-2026-120146 CVE-2026-120147                      CVE-2026-120148 CVE-2026-120149 CVE-2026-120150 CVE-2026-120151                      CVE-2026-120153 CVE-2026-120154


    Multiple security issues were discovered in PostgreSQL, which may result     in execution of arbitrary code, incorrect authentication, information     disclosure, denial of service or privilege escalation.

    To completely fix CVE-2026-6460 some extensions will require re-compilation     against this released version.

    For Debian 12 bookworm, these problems have been fixed in version     15.20-0+deb12u1.

    We recommend that you upgrade your postgresql-15 packages.

    For the detailed security status of postgresql-15 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/postgresql-15

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
380283	FreeBSD : PostgreSQL -- multiple vulnerabilities (1a672925-de93-11f1-9824-6cc21735f730)	Nessus	FreeBSD Local Security Checks	2026/11/13	2026/11/13	high
380157	Linux Distros Unpatched Vulnerability : CVE-2026-6467	Nessus	Misc.	2026/11/13	2026/11/14	high
381297	Debian dla-4905 : libecpg-compat3 - security update	Nessus	Debian Local Security Checks	2026/11/14	2026/11/14	high

偵測

搜尋 Plugin

high

high

high