Hosts vulnerable to CVE-2026-59999

CVE-2026-59999 — severity medium, CVSS 5.9 — 161 affected hosts indexed by QROS Explore.

About CVE-2026-59999

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

Showing 48 of 161 hosts, ranked by risk score.

demo.ctrace.se (37.139.14.236)

The Netherlands · Amsterdam

3 open ports · 29 CVE · risk 98/100 · critical

http, ssh

ip101.ip-5-135-75.eu (5.135.75.101)

France · Roubaix

5 open ports · 21 CVE · risk 98/100 · critical

http, ssh

leepinnovationmap.org (24.144.70.154)

United States · Santa Clara

3 open ports · 20 CVE · risk 98/100 · critical

http, ssh

24.199.113.23

United States · Santa Clara

3 open ports · 25 CVE · risk 98/100 · critical

http, ssh

37.139.29.125

The Netherlands · Amsterdam

8 open ports · 25 CVE · risk 98/100 · critical

http, opcua, pop3, s7, ssh

ip126.ip-15-235-58.net (15.235.58.126)

Canada · Montreal (Ville-Marie)

8 open ports · 85 CVE · risk 98/100 · critical

http, imap, pop3, smtp, ssh

license.jiku.pro (24.144.64.243)

United States · North Bergen

4 open ports · 53 CVE · risk 98/100 · critical

http, ssh

24.144.94.124

United States · Santa Clara

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

ip105.ip-5-196-172.eu (5.196.172.105)

France · Roubaix

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

24.199.87.26

United States · North Bergen

52 open ports · 21 CVE · risk 98/100 · critical

adb, bacnet, crimson, dahua, dnp3, docker, elasticsearch, ethernet_ip, http, iec_104, imap, imaps, kibana, memcached, modbus, mongodb, mqtt, mqtt_tls, nfs, niagara_fox, opcua, pjl_printer, pop3, pop3s, rabbitmq_mgmt, redis, rpcbind, s7, sip, sip_tls, smtp, smtp_submission, smtps, ssh, tr_069, vnc, winbox

ksv-roter-traktor.de (5.75.154.61)

Germany · Nuremberg

2 open ports · 89 CVE · risk 98/100 · critical

http, ssh

bithubafrica.com (24.144.77.113)

The Netherlands · Amsterdam

3 open ports · 85 CVE · risk 98/100 · critical

http, ssh

ec2-3-0-90-39.ap-southeast-1.compute.amazonaws.com (3.0.90.39)

Singapore · Singapore

2 open ports · 58 CVE · risk 98/100 · critical

http, ssh

bc-summarizer-gpt.ct.digital (24.199.70.210)

United States · Santa Clara

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

static.99.122.88.23.clients.your-server.de (23.88.122.99)

Germany · Falkenstein

2 open ports · 25 CVE · risk 98/100 · critical

mqtt, ssh

backoffice-center.com (24.144.121.92)

United States · North Bergen

3 open ports · 65 CVE · risk 98/100 · critical

http, ssh

24.144.78.71

The Netherlands · Amsterdam

4 open ports · 25 CVE · risk 98/100 · critical

ftp, http, smtp, ssh

hostedby.privatelayer.com (179.43.186.130)

Switzerland · Zurich

2 open ports · 21 CVE · risk 98/100 · critical

rpcbind, ssh

static.14.129.75.5.clients.your-server.de (5.75.129.14)

Germany · Nuremberg

52 open ports · 21 CVE · risk 98/100 · critical

demo-dev.innovito.net (24.144.80.17)

United States · Neligh

4 open ports · 21 CVE · risk 98/100 · critical

http, smtp, ssh

24.199.70.114

United States · Santa Clara

2 open ports · 25 CVE · risk 98/100 · critical

http, ssh

24.199.73.129

United States · Santa Clara

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

eme.simulator.intopalo.com (37.27.57.222)

Finland · Helsinki

3 open ports · 24 CVE · risk 98/100 · critical

http, ssh

24.199.96.90

United States · Brentwood

2 open ports · 20 CVE · risk 98/100 · critical

http, ssh

ns1023191.ip-15-204-46.us (15.204.46.132)

United States · Hillsboro

4 open ports · 21 CVE · risk 98/100 · critical

http, ssh

ec2-3-1-163-27.ap-southeast-1.compute.amazonaws.com (3.1.163.27)

Singapore · Singapore

2 open ports · 22 CVE · risk 98/100 · critical

http, ssh

honoki.net (37.139.5.162)

The Netherlands · Amsterdam

3 open ports · 119 CVE · risk 98/100 · critical

http, ssh

depeg.amoy.etherisc.com (5.75.149.199)

Germany · Nuremberg

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

24.199.70.146

United States · Santa Clara

2 open ports · 24 CVE · risk 98/100 · critical

ssh

24.199.95.225

United States · North Bergen

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

vps-b36f0f7f.vps.ovh.ca (15.235.146.31)

Singapore · Singapore (Downtown Core)

1 open port · 21 CVE · risk 98/100 · critical

ssh

24.199.109.152

United States · Santa Clara

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

ns3033934.ip-5-39-81.eu (5.39.81.103)

France · Roubaix

2 open ports · 29 CVE · risk 98/100 · critical

ssh

jobs.kotisdesign.com (24.199.74.157)

United States · Santa Clara

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

24.199.72.17

United States · Santa Clara

2 open ports · 25 CVE · risk 98/100 · critical

http, ssh

static.165.99.88.23.clients.your-server.de (23.88.99.165)

Germany · Nuremberg

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

registrador.grupo3rn.com (24.199.76.247)

United States · Santa Clara

5 open ports · 53 CVE · risk 98/100 · critical

http, ssh

24.199.91.144

United States · North Bergen

4 open ports · 22 CVE · risk 98/100 · critical

http, rpcbind, ssh

vps-04485add.vps.ovh.us (15.204.240.219)

United States · Reston

1 open port · 22 CVE · risk 98/100 · critical

ssh

agro.ryzoma.cl (24.144.85.48)

United States · Santa Clara

3 open ports · 65 CVE · risk 98/100 · critical

http, ssh

45.55.37.158

United States · Clifton

3 open ports · 121 CVE · risk 98/100 · critical

http, ssh

1024.pl (5.9.174.104)

Germany · Falkenstein

14 open ports · 55 CVE · risk 98/100 · critical

ftp, http, imap, pop3, smtp, ssh

proservicedesk-api-dev.hashtagfox.com (23.88.110.32)

Germany · Nuremberg

4 open ports · 25 CVE · risk 98/100 · critical

http, ssh

static.24.250.75.5.clients.your-server.de (5.75.250.24)

Germany · Falkenstein

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

24.144.117.26

United States · North Bergen

3 open ports · 21 CVE · risk 98/100 · critical

http, ssh

alterenocafe.it (46.62.253.60)

Finland · Helsinki

4 open ports · 65 CVE · risk 98/100 · critical

http, smtp, ssh

app.coffeecraft.info (179.43.172.167)

Switzerland · Zurich

4 open ports · 21 CVE · risk 98/100 · critical

http, ssh

levpbx.pintelpbx.com (15.204.67.34)

United States · South Baltimore

7 open ports · 21 CVE · risk 98/100 · critical

http, mysql, sip_tls, smtp, ssh

Search all CVE-2026-59999 hosts in Explore

Open in Explore →