Low Severity
Published: Nov 5, 2026

[GitHub] ubuntu-sys-audit

Other
Type
N/A
CVSS Score
4
Views
Anonymous
Author

Description

Read-only security audit for Ubuntu 18.04 to 26.04. Checks for missing CVE fixes, backdoors and webshells. One static Go binary with a TUI and JSON output.

# ubuntu-sys-audit

[![build](https://github.com/guanting112/ubuntu-sys-audit/actions/workflows/release.yml/badge.svg?branch=main)](https://github.com/guanting112/ubuntu-sys-audit/actions/workflows/release.yml)
[![release](https://img.shields.io/github/v/release/guanting112/ubuntu-sys-audit?sort=semver)](https://github.com/guanting112/ubuntu-sys-audit/releases/latest)
[![license](https://img.shields.io/github/license/guanting112/ubuntu-sys-audit)](LICENSE)
[![Go version](https://img.shields.io/github/go-mod/go-version/guanting112/ubuntu-sys-audit)](go.mod)
[![build provenance: attested](https://img.shields.io/badge/provenance-attested-brightgreen?logo=github)](https://github.com/guanting112/ubuntu-sys-audit/attestations)
[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/guanting112/ubuntu-sys-audit/badge)](https://scorecard.dev/viewer/?uri=github.com/guanting112/ubuntu-sys-audit)
[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/16304/badge)](https://www.bestpractices.dev/projects/16304)
[![Ubuntu 18.04 to 26.04](https://img.shields.io/badge/Ubuntu-18.04%20%7C%2020.04%20%7C%2022.04%20%7C%2024.04%20%7C%2026.04-E95420?logo=ubuntu&logoColor=white)](#quick-start)
[![Linux amd64 and arm64](https://img.shields.io/badge/Linux-amd64%20%7C%20arm64-blue?logo=linux&logoColor=white)](#quick-start)

English | [繁體中文](README.zh-TW.md)

![Animated terminal UI: the opening screen, then a live scan of an Ubuntu host with its list of checks](docs/tui-scan.gif)

**A read-only security audit tool and CVE scanner for Ubuntu servers.**

`ubuntu-sys-audit` checks an Ubuntu 18.04, 20.04, 22.04, 24.04 or 26.04 host for missing CVE fixes, signs of compromise and risky configuration. It ships as a single static Go binary: download it, run it with sudo, and read the results in a terminal UI or as JSON. The host needs no agent, compiler or extra packages.

It helps answer questions like these, on one server or across a fleet:

- Which hosts still lack the fix fo

Translated to English from Chinese. Show original · see the source links.

References

Community Rating
0

Login to rate this exploit

Quick Actions
Related Exploits
High [GitHub] CVE-POC...
Low [GitHub] php2shell-analysis...
Medium [GitHub] CVE-2026-98432...