Detections
Analytics

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenSSH vulnerabilities (USN-8928-1)

high Nessus Plugin ID 367205

Synopsis

The remote Ubuntu host is missing one or more security updates.

Description

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8928-1 advisory.

 It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. (CVE-2026-106552)

 It was discovered that OpenSSH's sshd server incorrectly handled GSSAPIAuthentication state across authentication attempts. An attacker could possibly use this issue to obtain credentials from a previous failed authentication attempt. (CVE-2026-106553, CVE-2026-106555)

 It was discovered that OpenSSH incorrectly used an LZ77 dictionary coder during compression. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-106582)

 It was discovered that OpenSSH's ssh client incorrectly allowed special characters in command-line usernames. An attacker could possibly use this issue to inject arbitrary commands via specially crafted usernames. (CVE-2026-106583)

 It was discovered that OpenSSH's ssh-keygen incorrectly handled Daylight Saving Time when converting dates. An attacker could possibly use this issue to cause certificates to have incorrect expiration times.
 (CVE-2026-106584)

 It was discovered that OpenSSH did not check whether the maximum packet length was exceeded during decompression. A remote attacker could possibly use this issue to cause a denial of service.
 (CVE-2026-106585)

 It was discovered that OpenSSH's sshd server incorrectly applied the restrict keyword from authorized_keys to tunnel forwarding requests. A local attacker with an authorized key could possibly use this issue to bypass intended tunnel forwarding restrictions. (CVE-2026-106586)

 It was discovered that OpenSSH's sshd server incorrectly handled certain configuration options that accept a none value. An attacker could possibly use this issue to cause OpenSSH to behave unexpectedly.
 (CVE-2026-106587)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://ubuntu.com/security/notices/USN-8928-1

Plugin Details

Severity: High

ID: 367205

File Name: ubuntu_USN-8928-1.nasl

Version: 1.1

Type: Local

Agent: unix

Published: 10/19/2026

Updated: 10/19/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.37

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N

CVSS Score Source: CVE-2026-106555

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2026-106583

Vulnerability Information

CPE: cpe:/o:canonical:ubuntu_linux:22.04:-:lts, cpe:/o:canonical:ubuntu_linux:24.04:-:lts, cpe:/o:canonical:ubuntu_linux:26.04:-:lts, p-cpe:/a:canonical:ubuntu_linux:openssh-client-gssapi, p-cpe:/a:canonical:ubuntu_linux:openssh-client, p-cpe:/a:canonical:ubuntu_linux:openssh-server-gssapi, p-cpe:/a:canonical:ubuntu_linux:openssh-server, p-cpe:/a:canonical:ubuntu_linux:openssh-sftp-server, p-cpe:/a:canonical:ubuntu_linux:openssh-tests, p-cpe:/a:canonical:ubuntu_linux:ssh-askpass-gnome, p-cpe:/a:canonical:ubuntu_linux:ssh

Required KB Items: Host/cpu, Host/Debian/dpkg-l, Host/Ubuntu, Host/Ubuntu/release

Exploit Ease: No known exploits are available

Patch Publication Date: 10/14/2026

Vulnerability Publication Date: 10/6/2026

Reference Information

CVE: CVE-2026-106552, CVE-2026-106553, CVE-2026-106555, CVE-2026-106582, CVE-2026-106583, CVE-2026-106584, CVE-2026-106585, CVE-2026-106586, CVE-2026-106587

IAVA: 2026-A-1103

USN: 8928-1