The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20126 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding (CVE-2025-32728)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation     stating that it disables X11 and agent forwarding.(CVE-2025-32728)

Tenable has extracted the preceding description block directly from the EulerOS openssh security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation     stating that it disables X11 and agent forwarding.(CVE-2025-32728)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization openssh security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the openssh package has been released.

The remote NewStart CGSL host, running version MAIN 7.02, has openssh packages installed that are affected by multiple vulnerabilities:

  - A race condition in sshd affecting versions between 8.5p1 and 9.7p1 (inclusive) may allow arbitrary code     execution with root privileges. Successful exploitation has been demonstrated on 32-bit Linux/glibc     systems with ASLR. According to OpenSSH, the attack has been tested under lab conditions and requires on     average 6-8 hours of continuous connections up to the maximum the server will accept. Exploitation on     64-bit systems is believed to be possible but has not been demonstrated at this time.  (CVE-2024-6387)

  - A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition     which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be     able to trigger it by failing to authenticate within a set time period. (CVE-2024-6387)

  - The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path,     leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in     /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an     incomplete fix for CVE-2016-10009. (CVE-2023-38408)

  - OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.
    This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in     the default configuration, to jump to any location in the sshd address space. One third-party report     states remote code execution is theoretically possible. (CVE-2023-25136)

  - In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When     destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints     are only applied to the first key, even if a PKCS#11 token returns multiple keys. (CVE-2023-51384)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
274722	RHEL 10 : openssh (RHSA-2025:20126)	Nessus	Red Hat Local Security Checks	11/11/2025	11/11/2025	low
241009	EulerOS 2.0 SP13 : openssh (EulerOS-SA-2025-1694)	Nessus	Huawei Local Security Checks	6/30/2025	6/30/2025	low
242465	EulerOS 2.0 SP12 : openssh (EulerOS-SA-2025-1832)	Nessus	Huawei Local Security Checks	7/21/2025	7/21/2025	low
265119	EulerOS Virtualization 2.13.1 : openssh (EulerOS-SA-2025-2178)	Nessus	Huawei Local Security Checks	9/16/2025	9/16/2025	low
235173	Photon OS 3.0: Openssh PHSA-2025-3.0-0824	Nessus	PhotonOS Local Security Checks	5/6/2025	10/29/2025	medium
241813	EulerOS 2.0 SP10 : openssh (EulerOS-SA-2025-1784)	Nessus	Huawei Local Security Checks	7/10/2025	10/29/2025	low
242758	NewStart CGSL MAIN 7.02 : openssh Multiple Vulnerabilities (NS-SA-2025-0124)	Nessus	NewStart CGSL Local Security Checks	7/25/2025	10/29/2025	critical
504157	Siemens SIMATIC S7-1500 Expected Behavior Violation (CVE-2025-32728)	Tenable OT Security	Tenable.ot	11/13/2025	11/13/2025	medium

Detections

Analytics

Plugins Search

low

low

low

low

medium

low

critical

medium