Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or verify-required options that could be embedded in the certificate, nor did it validate these options. As a result it was possible that a user could authenticate with such a certificate that included a force-command option but still was able to execute other commands. What other command exactly would be available to the user depends on the implementation of the server. This issue is fixed in Apache MINA SSHD 2.19.0 and 3.0.0-M5. Applications are advised to upgrade to these versions. The fix rejects OpenSSH user certificates that include these options, since Apache MINA SSHD implements neither force-command nor sk-*-cert-v01@openssh.com user certificates (which are the only ones for which verify-required would make sense).

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory.

  - Vulnerability in the RDBMS (OpenSSL) component of Oracle Database Server. Supported versions that are     affected are 19.3-19.32 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated     attacker with network access via TLS to compromise RDBMS (OpenSSL). Successful attacks of this     vulnerability can result in takeover of RDBMS (OpenSSL). (CVE-2026-14456, CVE-2026-14457, CVE-2026-18798,     CVE-2026-54874, CVE-2026-63072, CVE-2026-63074, CVE-2026-63075, CVE-2026-63076, CVE-2026-75803)

  - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are     23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR     privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vulnerability     can result in takeover of RDBMS. (CVE-2026-91499)

  - Vulnerability in the Oracle OLAP component of Oracle Database Server. Supported versions that are affected     are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged     attacker having DBMS_AW privilege with network access via Oracle Net to compromise Oracle OLAP. Successful     attacks of this vulnerability can result in takeover of Oracle OLAP. (CVE-2026-91563)

  - Vulnerability in the RDBMS (Micronaut) component of Oracle Database Server. Supported versions that are     affected are 19.3-19.32 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated     attacker with network access via HTTP to compromise RDBMS (Micronaut). Successful attacks of this     vulnerability can result in unauthorized creation, deletion or modification access to critical data or all     RDBMS (Micronaut) accessible data as well as unauthorized read access to a subset of RDBMS (Micronaut)     accessible data. (CVE-2026-89044, CVE-2026-93492, CVE-2026-93493, CVE-2026-93494, CVE-2026-93560,     CVE-2026-93561, CVE-2026-93563, CVE-2026-93564, CVE-2026-93565, CVE-2026-93566, CVE-2026-93567,     CVE-2026-93568, CVE-2026-93569, CVE-2026-93572, CVE-2026-93573, CVE-2026-93574, CVE-2026-93575,     CVE-2026-93576, CVE-2026-93578, CVE-2026-93579)

  - Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are     19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker     having Create Table privilege with network access via Oracle Net to compromise VPD. Successful attacks of     this vulnerability can result in unauthorized creation, deletion or modification access to critical data     or all VPD accessible data as well as unauthorized access to critical data or complete access to all VPD     accessible data. (CVE-2026-91503)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3339-1 advisory.

    Update to upstream version 2.19.0.

    Security issues fixed:

    - CVE-2026-56452: remote users can use SCP to send filenames that lead to arbitrary file writes due to a     path traversal       issue in the `sshd-scp` component of Apache MINA SSHD. (bsc#1272158).
    - CVE-2026-56623: remote users can obtain access to git repositories outside of the configured server-side     root       directory on Windows systems due to path traversal issue in `org.apache.sshd:sshd-git` (bsc#1271993).
    - CVE-2026-56624: users can authenticate with certificates containing the `force-command` option but still     execute       other commands due to improper validation of certificate options in Apache MINA SSHD  (bsc#1271992).
    - CVE-2026-58624: remote execution of JGit commands can lead to arbitrary file writes due to improper     input validation       in `sshd-git` of Apache MINA SSHD (bsc#1271991).

    Other updates and bugfixes:

    - Version 2.19.0:
      * Bug Fixes
        - GH-899 Fix ProcessShellFactory on Linux.
        - GH-902 Fix client-side handling of sk-* public key signatures (also in the agent interfaces).
        - Limit size of decompressed SSH packets.
        - Improve checking SSH user certificates in public-key authentication.
        - Improve handling of repository paths in sshd-git on Windows.
        - Validate file names in SCP.
        - Escape newlines in filenames in the SCP protocol.
        - Restrict JGit commands accessible via GitPgmCommandFactory in sshd-git.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java library for     client-side and server-side SSH. Server-side OpenSSH user certificate validation during user     authentication in an Apache MINA SSHD server did not check for the unsupported force-command or verify-     required options that could be embedded in the certificate, nor did it validate these options. As a result     it was possible that a user could authenticate with such a certificate that included a force-command     option but still was able to execute other commands. What other command exactly would be available to the     user depends on the implementation of the server. This issue is fixed in Apache MINA SSHD 2.19.0 and     3.0.0-M5. Applications are advised to upgrade to these versions. The fix rejects OpenSSH user certificates     that include these options, since Apache MINA SSHD implements neither force-command nor     sk-*-cert-v01@openssh.com user certificates (which are the only ones for which verify-required would make     sense). (CVE-2026-56624)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
370482	Oracle Database Server (October 2026 CPU)	Nessus	Databases	Local	high
330534	SUSE SLED15 / SLES15 Security Update : apache-sshd (SUSE-SU-2026:3339-1)	Nessus	SuSE Local Security Checks	Local	high
329640	Linux Distros Unpatched Vulnerability : CVE-2026-56624	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-56624

high

Tenable Plugins

Coming Soon

high

high

high