The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95609 advisory.

    * JDK: Enhance PKCS5 padding (CVE-2026-83374)

    * JDK: Enhance TLS certificate handling (CVE-2026-83376)

    * JDK: Enhance LDAP logins (CVE-2026-83380)

    * JDK: Enhance SASL Authentication (CVE-2026-83381)

    * JDK: Enhance WebRowSets (CVE-2026-83387)

    * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)

    * JDK: Enhance Certificate Name Checks (CVE-2026-87294)

    * JDK: Enhance XPath Expressions (CVE-2026-87290)

    * JDK: Enhance Network Clients (CVE-2026-87292)

    * JDK: Enhance RMI connections (CVE-2026-87293)

    * JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

    * JDK: Enhance XML Processing (CVE-2026-83400)

    * JDK: Enhance JPEG loading (CVE-2026-91334)

    * JDK: Enhance Template Handling (CVE-2026-87367)

    * JDK: Enhance Image Handling (CVE-2026-91335)

    * JDK: Enhance Preferences (CVE-2026-91380)

    * JDK: Enhance TLS handshakes (CVE-2026-91373)

    * JDK: Enhance Font Rendering (CVE-2026-91381)

    * JDK: Enhance Image Processing (CVE-2026-91382)

    * JDK: Enhance jstatd (CVE-2026-91374)

    * JDK: Enhance Pack200 unpacking (CVE-2026-91395)

    * JDK: Improve Pack200 handling (CVE-2026-91396)

    * JDK: Enhance diagnostic sessions (CVE-2026-91397)

    * JDK: Enhance SOCKS5 support (CVE-2026-91398)

    * JDK: Enhance MIDI file handling (CVE-2026-91400)

    * JDK: Enhance zipfs (CVE-2026-91410)

    * JDK: Enhance JGSS (CVE-2026-91411)

    * JDK: Enhance CORBA (CVE-2026-91417)

    * JDK: Enhance font rendering (CVE-2026-91415)

    * JDK: Enhance HTTP server parsing (CVE-2026-91451)

    * JDK: Enhance HTTP Server Handler (CVE-2026-91452)

    * JDK: Improve HTTP headers (CVE-2026-91453)

    * JDK: Enhance GIF loading (CVE-2026-91418)

    * JDK: Enhance TLS Extensions (CVE-2026-91461)

    * JDK: Enhance krb5 tokens (CVE-2026-91462)

    * JDK: Enhance krb5 client (CVE-2026-91463)

    * JDK: Enhance Kerberos validation (CVE-2026-91464)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794481305 advisory.

  - Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle     Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1     and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows     unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.
    Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to     some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data     to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java     applets, such as through a web service. (CVE-2026-91451)

  - Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java     SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and     21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows     unauthenticated attacker with network access via TLS to compromise Oracle Java SE. Successful attacks of     this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS)     of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component,     e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java     deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets,     that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox     for security. (CVE-2026-91373)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503,     8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and     21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows     unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle     GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM     for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2026-83400)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE     (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle     GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise     Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial     denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This     vulnerability can only be exploited by supplying data to APIs in the specified Component without using     Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service.
    (CVE-2026-91417)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u503,     8u503-perf, 11.0.32.1, 17.0.20.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM     Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion     or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial     DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This     vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which     supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients     running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code     (e.g., code that comes from the internet) and rely on the Java sandbox for security. (CVE-2026-91382)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95613 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * JDK: Enhance PKCS5 padding (CVE-2026-83374)

    * JDK: Enhance TLS certificate handling (CVE-2026-83376)

    * JDK: Enhance LDAP logins (CVE-2026-83380)

    * JDK: Enhance SASL Authentication (CVE-2026-83381)

    * JDK: Enhance WebRowSets (CVE-2026-83387)

    * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)

    * JDK: Enhance Certificate Name Checks (CVE-2026-87294)

    * JDK: Enhance XPath Expressions (CVE-2026-87290)

    * JDK: Enhance Network Clients (CVE-2026-87292)

    * JDK: Enhance RMI connections (CVE-2026-87293)

    * JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

    * JDK: Enhance XML Processing (CVE-2026-83400)

    * JDK: Enhance JPEG loading (CVE-2026-91334)

    * JDK: Enhance Template Handling (CVE-2026-87367)

    * JDK: Enhance Image Handling (CVE-2026-91335)

    * JDK: Enhance Preferences (CVE-2026-91380)

    * JDK: Enhance TLS handshakes (CVE-2026-91373)

    * JDK: Enhance Font Rendering (CVE-2026-91381)

    * JDK: Enhance Image Processing (CVE-2026-91382)

    * JDK: Enhance jstatd (CVE-2026-91374)

    * JDK: Enhance Pack200 unpacking (CVE-2026-91395)

    * JDK: Improve Pack200 handling (CVE-2026-91396)

    * JDK: Enhance diagnostic sessions (CVE-2026-91397)

    * JDK: Enhance SOCKS5 support (CVE-2026-91398)

    * JDK: Enhance MIDI file handling (CVE-2026-91400)

    * JDK: Enhance zipfs (CVE-2026-91410)

    * JDK: Enhance JGSS (CVE-2026-91411)

    * JDK: Enhance CORBA (CVE-2026-91417)

    * JDK: Enhance font rendering (CVE-2026-91415)

    * JDK: Enhance HTTP server parsing (CVE-2026-91451)

    * JDK: Enhance HTTP Server Handler (CVE-2026-91452)

    * JDK: Improve HTTP headers (CVE-2026-91453)

    * JDK: Enhance GIF loading (CVE-2026-91418)

    * JDK: Enhance TLS Extensions (CVE-2026-91461)

    * JDK: Enhance krb5 tokens (CVE-2026-91462)

    * JDK: Enhance krb5 client (CVE-2026-91463)

    * JDK: Enhance Kerberos validation (CVE-2026-91464)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Note that the OpenJDK RPMs use the system certificate repository rather than one provided by OpenJDK.  For     updates to remove the compromised eMudhra certificates, please update the ca-certificates package.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95598 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * JDK: Enhance PKCS5 padding (CVE-2026-83374)

    * JDK: Enhance TLS certificate handling (CVE-2026-83376)

    * JDK: Enhance LDAP logins (CVE-2026-83380)

    * JDK: Enhance SASL Authentication (CVE-2026-83381)

    * JDK: Enhance WebRowSets (CVE-2026-83387)

    * JDK: Enhance HTTP Client Response Handling (CVE-2026-83395)

    * JDK: Enhance Certificate Name Checks (CVE-2026-87294)

    * JDK: Enhance XPath Expressions (CVE-2026-87290)

    * JDK: Enhance Network Clients (CVE-2026-87292)

    * JDK: Enhance RMI connections (CVE-2026-87293)

    * JDK: Enhance Certificate Constraint Checking (CVE-2026-101516)

    * JDK: Enhance XML Processing (CVE-2026-83400)

    * JDK: Enhance JPEG loading (CVE-2026-91334)

    * JDK: Enhance Template Handling (CVE-2026-87367)

    * JDK: Enhance Image Handling (CVE-2026-91335)

    * JDK: Enhance Preferences (CVE-2026-91380)

    * JDK: Enhance TLS handshakes (CVE-2026-91373)

    * JDK: Enhance Font Rendering (CVE-2026-91381)

    * JDK: Enhance Image Processing (CVE-2026-91382)

    * JDK: Enhance jstatd (CVE-2026-91374)

    * JDK: Enhance Pack200 unpacking (CVE-2026-91395)

    * JDK: Improve Pack200 handling (CVE-2026-91396)

    * JDK: Enhance diagnostic sessions (CVE-2026-91397)

    * JDK: Enhance SOCKS5 support (CVE-2026-91398)

    * JDK: Enhance MIDI file handling (CVE-2026-91400)

    * JDK: Enhance zipfs (CVE-2026-91410)

    * JDK: Enhance JGSS (CVE-2026-91411)

    * JDK: Enhance CORBA (CVE-2026-91417)

    * JDK: Enhance font rendering (CVE-2026-91415)

    * JDK: Enhance HTTP server parsing (CVE-2026-91451)

    * JDK: Enhance HTTP Server Handler (CVE-2026-91452)

    * JDK: Improve HTTP headers (CVE-2026-91453)

    * JDK: Enhance GIF loading (CVE-2026-91418)

    * JDK: Enhance TLS Extensions (CVE-2026-91461)

    * JDK: Enhance krb5 tokens (CVE-2026-91462)

    * JDK: Enhance krb5 client (CVE-2026-91463)

    * JDK: Enhance Kerberos validation (CVE-2026-91464)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Note that the OpenJDK RPMs use the system certificate repository rather than one provided by OpenJDK.  For     updates to remove the compromised eMudhra certificates, please update the ca-certificates package.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
371809	Amazon Linux 2 : java-11-amazon-corretto (ALAS-2026-4039)	Nessus	Amazon Linux Local Security Checks	2026/10/24	2026/10/29	critical
371858	Amazon Linux 2023 : java-21-amazon-corretto, java-21-amazon-corretto-devel, java-21-amazon-corretto-headless (ALAS2023-2026-3319)	Nessus	Amazon Linux Local Security Checks	2026/10/25	2026/10/29	critical
371868	Amazon Linux 2023 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2023-2026-3317)	Nessus	Amazon Linux Local Security Checks	2026/10/25	2026/11/9	critical
371888	Amazon Linux 2023 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2023-2026-3318)	Nessus	Amazon Linux Local Security Checks	2026/10/25	2026/10/29	critical
381224	RockyLinux 8 : java-1.8.0-openjdk security update for Rocky Linux 8 (Important) (RLSA-2026:95609)	Nessus	Rocky Linux Local Security Checks	2026/11/14	2026/11/14	high
379598	AlmaLinux 9.6 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794481305)	Nessus	Alma Linux Local Security Checks	2026/11/12	2026/11/12	critical
371871	Amazon Linux 2023 : java-1.8.0-amazon-corretto, java-1.8.0-amazon-corretto-devel (ALAS2023-2026-3315)	Nessus	Amazon Linux Local Security Checks	2026/10/25	2026/10/29	critical
379007	RHEL 9 : java-1.8.0-openjdk security update for RHEL 9 (Important) (RHSA-2026:95613)	Nessus	Red Hat Local Security Checks	2026/11/11	2026/11/11	high
379075	RHEL 7 : java-1.8.0-openjdk (RHSA-2026:95598)	Nessus	Red Hat Local Security Checks	2026/11/11	2026/11/11	high

偵測

搜尋 Plugin

critical

critical

critical

critical

high

critical

critical

high

high