The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792935277 advisory.

  - In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a     GSSAPIAuthentication authentication attempt. (CVE-2026-106553)

  - In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted     across authentication attempts. (CVE-2026-106555)

  - In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to     injection. (CVE-2026-106583)

  - In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is     exceeded during decompression of highly compressed data. (CVE-2026-106585)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792935277 advisory.

  - In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a     GSSAPIAuthentication authentication attempt. (CVE-2026-106553)

  - In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted     across authentication attempts. (CVE-2026-106555)

  - In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to     injection. (CVE-2026-106583)

  - In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is     exceeded during decompression of highly compressed data. (CVE-2026-106585)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1792932827 advisory.

  - In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a     GSSAPIAuthentication authentication attempt. (CVE-2026-106553)

  - In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted     across authentication attempts. (CVE-2026-106555)

  - In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to     injection. (CVE-2026-106583)

  - In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is     exceeded during decompression of highly compressed data. (CVE-2026-106585)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3354 advisory.

    In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to     unintended locations) during a recursive copy operation. (CVE-2026-106552)

    In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a     GSSAPIAuthentication authentication attempt. (CVE-2026-106553)

    In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted     across authentication attempts. (CVE-2026-106555)

    In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is     contraindicated by the arXiv 2609.07709 Crossing the Streams findings. (CVE-2026-106582)

    In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to     injection. (CVE-2026-106583)

    In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of     Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic     locations. (CVE-2026-106584)

    In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is     exceeded during decompression of highly compressed data. (CVE-2026-106585)

    In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to     tunnel forwarding but was not, a different vulnerability than CVE-2026-73283. (CVE-2026-106586)

    In sshd in OpenSSH before 10.6, the value none for a configuration option is sometimes interpreted as a     filename but was intended to mean that a feature is disabled. (CVE-2026-106587)

    sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when sftp     server:/path . is used with an attacker-controlled server. (CVE-2026-59995)

    internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can     be important if a later command-line argument would have helped to ensure the intended security properties     of an SFTP connection. (CVE-2026-59997)

    sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has     no value if the server is in Windows Active Directory. (CVE-2026-59998)

    In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over     PermitTunnel=yes, but did not. (CVE-2026-59999)

    sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption     from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
    (CVE-2026-60000)

    sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. (CVE-2026-60001)

    In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only     locally, including operations that add tokens or use keys. This is caused by misinteraction between agent     locking and the session-bind@openssh.com extension. (CVE-2026-73281)

    In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-     forwarding operations are concurrent. (CVE-2026-73282)

    In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to     tunnel forwarding but was not. (CVE-2026-73283)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to     injection. (CVE-2026-106583)

Note that Nessus relies on the presence of the package as reported by the vendor.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792197391 advisory.

  - In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to     unintended locations) during a recursive copy operation. (CVE-2026-106552)

  - In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a     GSSAPIAuthentication authentication attempt. (CVE-2026-106553)

  - In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted     across authentication attempts. (CVE-2026-106555)

  - In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is     contraindicated by the arXiv 2609.07709 Crossing the Streams findings. (CVE-2026-106582)

  - In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to     injection. (CVE-2026-106583)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99573 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux     OpenSSH client versions (CVE-2026-55655)

    * openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS     known-group validation leads to client-side denial of service (CVE-2026-55653)

    * openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)

    * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options     (CVE-2026-59999)

    * openssh: openssh: Information disclosure via shared compression side-channel (CVE-2026-106582)

    * openssh: OpenSSH: Credential disclosure via failed GSSAPI authentication (CVE-2026-106553)

    * openssh: openssh: Denial of service via oversized decompressed packets (CVE-2026-106585)

    * openssh: openssh: Command injection via unvalidated command-line username (CVE-2026-106583)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
371940	AlmaLinux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792935277)	Nessus	Alma Linux Local Security Checks	2026/10/25	2026/10/25	high
371941	Rocky Linux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792935277)	Nessus	Rocky Linux Local Security Checks	2026/10/25	2026/10/25	high
371939	CentOS Linux 8 [TuxCare] Security Update: openssh / openssh-askpass / openssh-cavs / openssh-clients / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1792932827)	Nessus	CentOS Local Security Checks	2026/10/25	2026/10/25	high
374367	Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2026-3354)	Nessus	Amazon Linux Local Security Checks	2026/10/30	2026/10/30	high
371357	Linux Distros Unpatched Vulnerability : CVE-2026-106583	Nessus	Misc.	2026/10/23	2026/11/9	high
366706	AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792197391)	Nessus	Alma Linux Local Security Checks	2026/10/17	2026/10/17	high
379611	RHEL 8 : openssh (RHSA-2026:99573)	Nessus	Red Hat Local Security Checks	2026/11/12	2026/11/12	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high