Known vulnerabilities
No actively exploited vulnerabilities (CISA KEV)
Published CVEs affecting the software versions your servers reveal.
Why it matters
Criminal groups are exploiting these vulnerabilities right now, often within days of publication and frequently to deploy ransomware. An exposed vulnerable server is likely to be found by automated attack tools.
How to fix it
Moderate · a few hours- Confirm the installed version and whether the vulnerable feature is in use.
- Patch or upgrade immediately; if you cannot, restrict access to the service until you can.
- Look for signs of compromise: unknown accounts, new files in the web root, unusual outbound traffic.
- Re-run the scan to confirm the version is no longer affected.
Debian / Ubuntu
sudo apt update && sudo apt upgrade sudo apt install unattended-upgrades && sudo dpkg-reconfigure unattended-upgrades
RHEL / Alma / Rocky
sudo dnf upgrade --security
How we test it
The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.
Does your domain pass this check?
Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.
Scan your domain free