The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69130 advisory.

    * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)
      * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options     (CVE-2026-59999)
      * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)
      * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)
      * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client     (CVE-2026-73282)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69130 advisory.

    * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)

    * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options     (CVE-2026-59999)

    * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)

    * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)

    * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client     (CVE-2026-73282)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ59564. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ59564 advisory.

  - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous     delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP     server to induce loading and instantation of arbitrary classes. (CVE-2026-8400)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service     due to a stack-based buffer overflow. (CVE-2026-18828)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due     to a stack-based buffer overflow. (CVE-2026-16872, CVE-2026-17122, CVE-2026-17138)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due     to a stack buffer overflow. (CVE-2026-16841, CVE-2026-16862, CVE-2026-16864, CVE-2026-16885,     CVE-2026-16894, CVE-2026-16913, CVE-2026-17157)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due     to a use-after-free vulnerability. (CVE-2026-17118)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80513 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux     OpenSSH client versions (CVE-2026-55655)

    * openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS     known-group validation leads to client-side denial of service (CVE-2026-55653)

    * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)

    * openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay     (CVE-2026-60001)

    * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options     (CVE-2026-59999)

    * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
348735	AlmaLinux 9 : openssh (ALSA-2026:69130)	Nessus	Alma Linux Local Security Checks	9/22/2026	9/22/2026	high
349094	RockyLinux 9 : openssh (RLSA-2026:69130)	Nessus	Rocky Linux Local Security Checks	9/22/2026	9/22/2026	high
338725	AIX : Multiple Vulnerabilities (IJ59564)	Nessus	AIX Local Security Checks	8/21/2026	10/16/2026	medium
368060	RHEL 9 : openssh (RHSA-2026:80513)	Nessus	Red Hat Local Security Checks	10/20/2026	10/20/2026	high

Detections

Analytics

Plugins Search

high

high

medium

high