The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2122:14 advisory.

    * openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw (CVE-2026-59997)
      * openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active     Directory (CVE-2026-59998)
      * openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts (CVE-2026-60000)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21477-1 advisory.

    - CVE-2026-59995: sftp: location of downloaded files not properly constrained when `sftp server:/path .`     is used with       an attacker-controlled server (bsc#1271044).
    - CVE-2026-59996: scp: file placed in the parent directory of an intended target directory when copy     occurs between two       remote destinations (bsc#1271046).
    - CVE-2026-59997: sshd: `internal-sftp` command lines are silently truncated after the 9th argument     (bsc#1271048).
    - CVE-2026-59998: sshd: undocumented security-relevant `GSSAPIStrictAcceptorCheck` behavior in Windows     Active Directory       is not documented (bsc#1271049).
    - CVE-2026-59999: sshd: `DisableForwarding=yes` does not override `PermitTunnel=yes` (bsc#1271052).
    - CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled     (bsc#1271053).
    - CVE-2026-60001: sshd: minimum authentication delay is not honored (bsc#1271054).
    - CVE-2026-60002: ssh: client-side use-after-free when a server changes its host key during a key     reexchange       (bsc#1271055).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104818 advisory.

    internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can     be important if a later command-line argument would have helped to ensure the intended security properties     of an SFTP connection.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784297006 advisory.

  - sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when sftp     server:/path . is used with an attacker-controlled server. (CVE-2026-59995)

  - scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy     occurs between two remote destinations. (CVE-2026-59996)

  - internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can     be important if a later command-line argument would have helped to ensure the intended security properties     of an SFTP connection. (CVE-2026-59997)

  - sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has     no value if the server is in Windows Active Directory. (CVE-2026-59998)

  - In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over     PermitTunnel=yes, but did not. (CVE-2026-59999)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption     from excessive authentication attempts) because MaxAuthTries was mishandled for     GSSAPIAuthentication.(CVE-2026-60000)

    scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy     occurs between two remote destinations.(CVE-2026-59996)

    ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-     exchange. (This outcome occurs only on the client side.)(CVE-2026-60002)

    internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can     be important if a later command-line argument would have helped to ensure the intended security properties     of an SFTP connection.(CVE-2026-59997)

    sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when 'sftp     server:/path .' is used with an attacker-controlled server.(CVE-2026-59995)

    In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over     PermitTunnel=yes, but did not.(CVE-2026-59999)

    sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.(CVE-2026-60001)

Tenable has extracted the preceding description block directly from the EulerOS openssh security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ59565. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ59565 advisory.

  - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous     delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP     server to induce loading and instantation of arbitrary classes. (CVE-2026-8400)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service     due to a stack-based buffer overflow. (CVE-2026-18828)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due     to a stack-based buffer overflow. (CVE-2026-16872, CVE-2026-17122, CVE-2026-17138)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due     to a stack buffer overflow. (CVE-2026-16841, CVE-2026-16862, CVE-2026-16864, CVE-2026-16885,     CVE-2026-16894, CVE-2026-16913, CVE-2026-17157)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due     to a use-after-free vulnerability. (CVE-2026-17118)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85847 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw (CVE-2026-59997)

    * openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active     Directory (CVE-2026-59998)

    * openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts (CVE-2026-60000)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can     be important if a later command-line argument would have helped to ensure the intended security properties     of an SFTP connection. (CVE-2026-59997)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85958 advisory.

    - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck       Resolves: RHEL-276221
    - CVE-2026-59997: Fix internal-sftp server argument parsing limit       Resolves: RHEL-276234

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88211 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw (CVE-2026-59997)

    * openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active     Directory (CVE-2026-59998)

    * openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay     (CVE-2026-60001)

    * openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts (CVE-2026-60000)

    * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88211 advisory.

    - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck       Resolves: RHEL-272840
    - CVE-2026-59997: Fix internal-sftp server argument parsing limit       Resolves: RHEL-272843
    - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts       Resolves: RHEL-272837
    - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive       authentication where the minimum per-attempt delay was not being enforced       Resolves: RHEL-272826

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
371406	MiracleLinux 9 : openssh-9.9p1-13.el9_8.ML.1 (AXSA:2026-2122:14)	Nessus	Miracle Linux Local Security Checks	2026/10/23	2026/10/23	medium
331565	openSUSE 16: openssh / openssh-askpass-gnome / openssh-cavs / openssh-clients / etc (openSUSE-SU-2026:21477-1)	Nessus	SuSE Local Security Checks	2026/8/1	2026/8/1	critical
340923	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-104818)	Nessus	Unity Linux Local Security Checks	2026/8/26	2026/8/26	medium
360830	Rocky Linux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784297006)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
364034	EulerOS 2.0 SP15 : openssh (EulerOS-SA-2026-3995)	Nessus	Huawei Local Security Checks	2026/10/8	2026/10/8	critical
338723	AIX : Multiple Vulnerabilities (IJ59565)	Nessus	AIX Local Security Checks	2026/8/21	2026/10/16	medium
367820	RHEL 10 : openssh (RHSA-2026:85847)	Nessus	Red Hat Local Security Checks	2026/10/20	2026/10/20	medium
325691	Linux Distros Unpatched Vulnerability : CVE-2026-59997	Nessus	Misc.	2026/7/8	2026/10/23	medium
370151	Oracle Linux 9 : openssh (ELSA-2026-85958)	Nessus	Oracle Linux Local Security Checks	2026/10/21	2026/10/21	medium
370912	RHEL 8 : openssh (RHSA-2026:88211)	Nessus	Red Hat Local Security Checks	2026/10/22	2026/10/22	medium
371232	Oracle Linux 8 : openssh (ELSA-2026-88211)	Nessus	Oracle Linux Local Security Checks	2026/10/23	2026/10/23	medium

检测

插件搜索

medium

critical

medium

high

critical

medium

medium

medium

medium

medium

medium