The version of AIX installed on the remote host is prior to APAR IJ59564. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ59564 advisory.

  - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous     delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP     server to induce loading and instantation of arbitrary classes. (CVE-2026-8400)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service     due to a stack-based buffer overflow. (CVE-2026-18828)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due     to a stack-based buffer overflow. (CVE-2026-16872, CVE-2026-17122, CVE-2026-17138)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due     to a stack buffer overflow. (CVE-2026-16841, CVE-2026-16862, CVE-2026-16864, CVE-2026-16885,     CVE-2026-16894, CVE-2026-16913, CVE-2026-17157)

  - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due     to a use-after-free vulnerability. (CVE-2026-17118)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1564 advisory.

    This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.6. It addresses 39 CVEs:
    CVE-2026-14673, CVE-2026-6477, CVE-2026-14664, CVE-2025-12817, CVE-2026-6473, and 34 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
338725	AIX : Multiple Vulnerabilities (IJ59564)	Nessus	AIX Local Security Checks	8/21/2026	9/28/2026	medium
356888	Rocky Linux 9.6 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1564)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high

Detections

Analytics

Plugins Search

medium

high