nmap vulnerabilities and fixes
Recent CVEs affecting nmap, with upgrade or downgrade steps. 1 tracked.
nmap has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-06-28. Highest priority: CVE-2026-58058 (score 51/100).
- CVE-2026-58058 MEDIUM 6.5 UPGRADE Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_pri
FAQ
How do I fix nmap vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nmap being exploited right now?
None of the tracked nmap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nmap CVE should I patch first?
CVE-2026-58058 currently ranks highest (51/100): Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_pri.