The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:47757 advisory.

    * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client     versions (CVE-2026-55655)
      * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group     validation leads to client-side denial of service (CVE-2026-55653)
      * openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to     missing NULL sentinel termination (CVE-2026-55654)
      * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side     (CVE-2026-60002)
      * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_47756 advisory.

    * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client     versions (CVE-2026-55655)

    * openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group     validation leads to client-side denial of service (CVE-2026-55653)

    * openssh: Heap out-of-bounds read in Rocky Linux versions of OpenSSH GSSAPI indicator cleanup due to     missing NULL sentinel termination (CVE-2026-55654)

    * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side     (CVE-2026-60002)

    * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_47757 advisory.

    * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client     versions (CVE-2026-55655)

    * openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group     validation leads to client-side denial of service (CVE-2026-55653)

    * openssh: Heap out-of-bounds read in Rocky Linux versions of OpenSSH GSSAPI indicator cleanup due to     missing NULL sentinel termination (CVE-2026-55654)

    * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side     (CVE-2026-60002)

    * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47757 advisory.

    - CVE-2026-59996: Fix remote glob result of '..' causing files to be placed       in unintended parent directories when scp performs remote-to-remote copy       via the local host       Resolves: RHEL-193170
    - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange       Resolves: RHEL-193016
    - CVE-2026-55653: Fix double free in openssh DH-GEX client path during       FIPS known-group validation that leads to client-side denial of service       Resolves: RHEL-186435
    - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator       cleanup due to missing NULL terminator       Resolves: RHEL-185826

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
331288	AlmaLinux 10 : openssh (ALSA-2026:47757)	Nessus	Alma Linux Local Security Checks	2026/7/30	2026/7/30	critical
358771	Rocky Linux 9 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_47756)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
358807	Rocky Linux 10.2 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_47757)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
331287	Oracle Linux 10 : openssh (ELSA-2026-47757)	Nessus	Oracle Linux Local Security Checks	2026/7/30	2026/7/30	critical

检测

插件搜索

critical

critical

critical

critical