Every CVE Search/ Get API key

CVE-2026-55653

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

4.3 MediumFix available

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.53%Up 0.3 points since Jun 23, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.3

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Record
CVE-2026-55653
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-415
Updated
2026-11-05
EUVDEUVD-2026-38412 4.3

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Record
EUVD-2026-38412
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-05
GitHub AdvisoriesGHSA-28f3-55mq-pp68 4.3

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in...

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Record
GHSA-28f3-55mq-pp68
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-415
Updated
2026-11-02
NVD 4.3

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Record
CVE-2026-55653
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-415
Updated
2026-11-05
OSVBELL-CVE-2026-55653 6.5

CVE-2026-55653 does not affect BellSoft software

Record
BELL-CVE-2026-55653
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.3

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Record
CVE-2026-55653
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-415
Updated
2026-11-07
Show 18 moreShow less
OSVDEBIAN-CVE-2026-55653 4.3

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Record
DEBIAN-CVE-2026-55653
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2026:36759 5.0

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:36759
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:47755 5.0

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:47755
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:47756 7.7

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:47756
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:47757 7.7

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:47757
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:76748 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:76748
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:76993 7.7

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:76993
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:80513 7.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:80513
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:47755 5.0

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions (CVE-2026-55655)

  • openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:47755
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N
Updated
2026-11-02
OSVRLSA-2026:47756 7.7

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions (CVE-2026-55655)

  • openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)

  • openssh: Heap out-of-bounds read in Rocky Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)

  • openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)

  • openssh: OpenSSH: scp file misplacement vulnerability during remote copy (CVE-2026-59996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:47756
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVRLSA-2026:47757 7.7

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions (CVE-2026-55655)

  • openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)

  • openssh: Heap out-of-bounds read in Rocky Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)

  • openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)

  • openssh: OpenSSH: scp file misplacement vulnerability during remote copy (CVE-2026-59996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:47757
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2026-55653 4.3

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Record
UBUNTU-CVE-2026-55653
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:47755 No score

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655)
  • openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:47755
Updated
2026-11-02
OSVALSA-2026:47756 No score

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655)
  • openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)
  • openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)
  • openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)
  • openssh: OpenSSH: scp file misplacement vulnerability during remote copy (CVE-2026-59996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:47756
Updated
2026-11-02
OSVALSA-2026:47757 No score

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655)
  • openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)
  • openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)
  • openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)
  • openssh: OpenSSH: scp file misplacement vulnerability during remote copy (CVE-2026-59996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:47757
Updated
2026-11-02
OSVAZL-91200 No score

CVE-2026-55653 affecting package openssh 9.8p1-10

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Record
AZL-91200
Updated
2026-11-05
OSVCLSA-2026-1783694178 No score

openssh: Fix of CVE-2026-55653

  • CVE-2026-55653: fix double free in the DH-GEX client path during FIPS known-group validation that leads to a client-side denial of service
Record
CLSA-2026-1783694178
Updated
2026-11-02
OSVCLSA-2026-1783706054 No score

openssh: Fix of CVE-2026-55653

  • CVE-2026-55653: fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service
Record
CLSA-2026-1783706054
Updated
2026-11-02

Affected products

Show 10 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
openssh
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-30.el8_10
8.0p1-30.el8_10
openssh-askpass
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-30.el8_10
8.0p1-30.el8_10
openssh-cavs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-30.el8_10
8.0p1-30.el8_10
openssh-clients
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-30.el8_10
8.0p1-30.el8_10
openssh-keycat
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-30.el8_10
8.0p1-30.el8_10
openssh-ldap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-30.el8_10
8.0p1-30.el8_10
openssh-server
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-30.el8_10
8.0p1-30.el8_10
pam_ssh_agent_auth
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.10.3-7.30.el8_10
0.10.3-7.30.el8_10
openssh
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-9.el9_8.alma.1
9.9p1-9.el9_8.alma.1
openssh-askpass
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-9.el9_8.alma.1
9.9p1-9.el9_8.alma.1
Show 131 moreShow less
Affected packages
PackageAffectedFixed
openssh-clients
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-9.el9_8.alma.1
9.9p1-9.el9_8.alma.1
openssh-keycat
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-9.el9_8.alma.1
9.9p1-9.el9_8.alma.1
openssh-server
AlmaLinux:9
From an advisory covering 5 CVEs
 before 9.9p1-9.el9_8.alma.1
9.9p1-9.el9_8.alma.1
pam_ssh_agent_auth
AlmaLinux:9
From an advisory covering 5 CVEs
 before 0.10.4-7.9.el9_8.alma.1
0.10.4-7.9.el9_8.alma.1
openssh
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-25.el10_2.alma.1
9.9p1-25.el10_2.alma.1
openssh-askpass
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-25.el10_2.alma.1
9.9p1-25.el10_2.alma.1
openssh-clients
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-25.el10_2.alma.1
9.9p1-25.el10_2.alma.1
openssh-keycat
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-25.el10_2.alma.1
9.9p1-25.el10_2.alma.1
openssh-keysign
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-25.el10_2.alma.1
9.9p1-25.el10_2.alma.1
openssh-server
AlmaLinux:10
From an advisory covering 5 CVEs
 before 9.9p1-25.el10_2.alma.1
9.9p1-25.el10_2.alma.1
openssh
Azure Linux:3
 through 9.8p1-10 None known
openssh
TuxCare:AlmaLinux:9.2
 before 8.7p1-30.el9_2.tuxcare.els13
8.7p1-30.el9_2.tuxcare.els13
openssh-askpass
TuxCare:AlmaLinux:9.2
 before 8.7p1-30.el9_2.tuxcare.els13
8.7p1-30.el9_2.tuxcare.els13
openssh-clients
TuxCare:AlmaLinux:9.2
 before 8.7p1-30.el9_2.tuxcare.els13
8.7p1-30.el9_2.tuxcare.els13
openssh-keycat
TuxCare:AlmaLinux:9.2
 before 8.7p1-30.el9_2.tuxcare.els13
8.7p1-30.el9_2.tuxcare.els13
openssh-server
TuxCare:AlmaLinux:9.2
 before 8.7p1-30.el9_2.tuxcare.els13
8.7p1-30.el9_2.tuxcare.els13
openssh-sk-dummy
TuxCare:AlmaLinux:9.2
 before 8.7p1-30.el9_2.tuxcare.els13
8.7p1-30.el9_2.tuxcare.els13
pam_ssh_agent_auth
TuxCare:AlmaLinux:9.2
 before 0.10.4-5.30.el9_2.tuxcare.els13
0.10.4-5.30.el9_2.tuxcare.els13
openssh
TuxCare:AlmaLinux:9.6
 before 8.7p1-45.el9_6.tuxcare.els6
8.7p1-45.el9_6.tuxcare.els6
openssh-askpass
TuxCare:AlmaLinux:9.6
 before 8.7p1-45.el9_6.tuxcare.els6
8.7p1-45.el9_6.tuxcare.els6
openssh-clients
TuxCare:AlmaLinux:9.6
 before 8.7p1-45.el9_6.tuxcare.els6
8.7p1-45.el9_6.tuxcare.els6
openssh-keycat
TuxCare:AlmaLinux:9.6
 before 8.7p1-45.el9_6.tuxcare.els6
8.7p1-45.el9_6.tuxcare.els6
openssh-server
TuxCare:AlmaLinux:9.6
 before 8.7p1-45.el9_6.tuxcare.els6
8.7p1-45.el9_6.tuxcare.els6
openssh-sk-dummy
TuxCare:AlmaLinux:9.6
 before 8.7p1-45.el9_6.tuxcare.els6
8.7p1-45.el9_6.tuxcare.els6
pam_ssh_agent_auth
TuxCare:AlmaLinux:9.6
 before 0.10.4-5.45.el9_6.tuxcare.els6
0.10.4-5.45.el9_6.tuxcare.els6
openssh
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.3p1-6.hum1
0:10.3p1-6.hum1
openssh-askpass
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.3p1-6.hum1
0:10.3p1-6.hum1
openssh-clients
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.3p1-6.hum1
0:10.3p1-6.hum1
openssh-keycat
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.3p1-6.hum1
0:10.3p1-6.hum1
openssh-keysign
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.3p1-6.hum1
0:10.3p1-6.hum1
openssh-server
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.3p1-6.hum1
0:10.3p1-6.hum1
openssh-sk-dummy
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.3p1-6.hum1
0:10.3p1-6.hum1
openssh-askpass
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-askpass-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-cavs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-clients-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-keycat-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.10.3-7.30.el8_10
0:0.10.3-7.30.el8_10
openssh
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-askpass-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-cavs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-cavs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-clients
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-clients-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-keycat
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-keycat-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-ldap
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-ldap-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-server
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh-server-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
pam_ssh_agent_auth
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:0.10.3-7.30.el8_10
0:0.10.3-7.30.el8_10
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:0.10.3-7.30.el8_10
0:0.10.3-7.30.el8_10
openssh-askpass
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-askpass-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-clients-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-keycat-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
pam_ssh_agent_auth
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:0.10.4-7.9.el9_8
0:0.10.4-7.9.el9_8
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 5 CVEs
 before 0:0.10.4-7.9.el9_8
0:0.10.4-7.9.el9_8
openssh
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-askpass-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-clients
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-clients-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-keycat
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-keycat-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-server
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-server-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8
0:9.9p1-9.el9_8
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 5 CVEs
 before 0:0.10.4-7.9.el9_8
0:0.10.4-7.9.el9_8
openssh-askpass
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-askpass-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-clients-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-keycat-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-keysign
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-keysign-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-server-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-clients
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-keycat
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-server
Red Hat:enterprise_linux:10.2
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2
0:9.9p1-25.el10_2
openssh-askpass
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
 before 0:9.9p1-7.el10_0.5
0:9.9p1-7.el10_0.5
openssh-keysign
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
 before 0:9.9p1-7.el10_0.5
0:9.9p1-7.el10_0.5
openssh
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
 before 0:9.9p1-7.el10_0.5
0:9.9p1-7.el10_0.5
openssh-clients
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
 before 0:9.9p1-7.el10_0.5
0:9.9p1-7.el10_0.5
openssh-keycat
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
 before 0:9.9p1-7.el10_0.5
0:9.9p1-7.el10_0.5
openssh-server
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 7 CVEs
 before 0:9.9p1-7.el10_0.5
0:9.9p1-7.el10_0.5
openssh-clients
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 6 CVEs
 before 0:8.7p1-38.el9_4.10
0:8.7p1-38.el9_4.10
openssh-server
Red Hat:rhel_e4s:9.4::baseos
From an advisory covering 6 CVEs
 before 0:8.7p1-38.el9_4.10
0:8.7p1-38.el9_4.10
openssh-askpass
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 6 CVEs
 before 0:8.7p1-45.el9_6.5
0:8.7p1-45.el9_6.5
pam_ssh_agent_auth
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 6 CVEs
 before 0:0.10.4-5.45.el9_6.5
0:0.10.4-5.45.el9_6.5
openssh
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 6 CVEs
 before 0:8.7p1-45.el9_6.5
0:8.7p1-45.el9_6.5
openssh-clients
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 6 CVEs
 before 0:8.7p1-45.el9_6.5
0:8.7p1-45.el9_6.5
openssh-keycat
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 6 CVEs
 before 0:8.7p1-45.el9_6.5
0:8.7p1-45.el9_6.5
openssh-server
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 6 CVEs
 before 0:8.7p1-45.el9_6.5
0:8.7p1-45.el9_6.5
openssh
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:8.0p1-30.el8_10
0:8.0p1-30.el8_10
openssh
Rocky Linux:9
From an advisory covering 5 CVEs
 before 0:9.9p1-9.el9_8.rocky.0.1
0:9.9p1-9.el9_8.rocky.0.1
openssh
Rocky Linux:10
From an advisory covering 5 CVEs
 before 0:9.9p1-25.el10_2.rocky.0.1
0:9.9p1-25.el10_2.rocky.0.1
openssh
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1:6.2p2-61:6.2p2-6ubuntu11:6.4p1-11:6.4p1-21:6.5p1-1
Show 22 moreShow less
1:6.5p1-21:6.5p1-31:6.5p1-41:6.5p1-61:6.6p1-11:6.6p1-21:6.6p1-2ubuntu11:6.6p1-2ubuntu21:6.6p1-2ubuntu2.21:6.6p1-2ubuntu2.31:6.6p1-2ubuntu2.41:6.6p1-2ubuntu2.61:6.6p1-2ubuntu2.71:6.6p1-2ubuntu2.81:6.6p1-2ubuntu2.101:6.6p1-2ubuntu2.111:6.6p1-2ubuntu2.121:6.6p1-2ubuntu2.131:6.6p1-2ubuntu2.13+esm11:6.6p1-2ubuntu2.13+esm21:6.6p1-2ubuntu2.13+esm31:6.6p1-2ubuntu2.13+esm4
 None known
openssh
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1:6.9p1-21:6.9p1-31:7.1p1-11:7.1p1-31:7.1p1-4
Show 27 moreShow less
1:7.1p1-61:7.1p2-11:7.1p2-21:7.2p1-11:7.2p2-11:7.2p2-21:7.2p2-31:7.2p2-41:7.2p2-4ubuntu11:7.2p2-4ubuntu2.11:7.2p2-4ubuntu2.21:7.2p2-4ubuntu2.41:7.2p2-4ubuntu2.51:7.2p2-4ubuntu2.61:7.2p2-4ubuntu2.71:7.2p2-4ubuntu2.81:7.2p2-4ubuntu2.101:7.2p2-4ubuntu2.10+esm11:7.2p2-4ubuntu2.10+esm21:7.2p2-4ubuntu2.10+esm31:7.2p2-4ubuntu2.10+esm41:7.2p2-4ubuntu2.10+esm51:7.2p2-4ubuntu2.10+esm61:7.2p2-4ubuntu2.10+esm71:7.2p2-4ubuntu2.10+esm81:7.2p2-4ubuntu2.10+esm91:7.2p2-4ubuntu2.10+esm10
 None known
openssh
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
1:7.2p2-4ubuntu2.fips.2.2.31:7.2p2-4ubuntu2.fips.2.4.11:7.2p2-4ubuntu2.fips.2.4.21:7.2p2-4ubuntu2.fips.2.8.11:7.2p2-4ubuntu2.fips.2.10.1
Show 6 moreShow less
1:7.2p2-4ubuntu2.fips.2.10.21:7.2p2-4ubuntu2.fips.2.10.31:7.2p2-4ubuntu2.fips.2.10.41:7.2p2-4ubuntu2.fips.2.10.51:7.2p2-4ubuntu2.fips.2.10.61:7.2p2-4ubuntu2.fips.2.10.7
 None known
openssh
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
1:7.2p2-4ubuntu2.fips.2.21:7.2p2-4ubuntu2.fips.2.2.11:7.2p2-4ubuntu2.fips.2.10.1
 None known
openssh
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1:7.5p1-101:7.6p1-41:7.6p1-4ubuntu0.11:7.6p1-4ubuntu0.21:7.6p1-4ubuntu0.3
Show 9 moreShow less
1:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.61:7.6p1-4ubuntu0.71:7.6p1-4ubuntu0.7+esm11:7.6p1-4ubuntu0.7+esm21:7.6p1-4ubuntu0.7+esm31:7.6p1-4ubuntu0.7+esm41:7.6p1-4ubuntu0.7+esm51:7.6p1-4ubuntu0.7+esm6
 None known
openssh-ssh1
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:7.5p1-81:7.5p1-91:7.5p1-9build11:7.5p1-10
 None known
openssh
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.21:7.9p1-10~ubuntu18.04.fips.0.31:7.9p1-10~ubuntu18.04.fips.0.41:7.9p1-10~ubuntu18.04.fips.0.5
Show 5 moreShow less
1:7.9p1-10~ubuntu18.04.fips.0.61:7.9p1-10~ubuntu18.04.fips.0.71:7.9p1-10~ubuntu18.04.fips.0.81:7.9p1-10~ubuntu18.04.fips.0.91:7.9p1-10~ubuntu18.04.fips.0.10
 None known
openssh
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.2
 None known
openssh
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1:8.0p1-6build11:8.1p1-11:8.1p1-51:8.2p1-41:8.2p1-4ubuntu0.1
Show 14 moreShow less
1:8.2p1-4ubuntu0.21:8.2p1-4ubuntu0.31:8.2p1-4ubuntu0.41:8.2p1-4ubuntu0.51:8.2p1-4ubuntu0.71:8.2p1-4ubuntu0.81:8.2p1-4ubuntu0.91:8.2p1-4ubuntu0.101:8.2p1-4ubuntu0.111:8.2p1-4ubuntu0.121:8.2p1-4ubuntu0.131:8.2p1-4ubuntu0.13+esm11:8.2p1-4ubuntu0.13+esm21:8.2p1-4ubuntu0.13+esm3
 None known
openssh-ssh1
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:7.5p1-11build1
 None known
openssh
Ubuntu:Pro:FIPS-updates:20.04:LTS
 All versions, plus listed versions
1:8.2p1-4ubuntu0.fips.0.2.11:8.2p1-4ubuntu0.fips.0.4.01:8.2p1-4ubuntu0.fips.0.5.01:8.2p1-4ubuntu0.fips.0.71:8.2p1-4ubuntu0.fips.0.8
Show 7 moreShow less
1:8.2p1-4ubuntu0.fips.0.91:8.2p1-4ubuntu0.fips.0.101:8.2p1-4ubuntu0.fips.0.111:8.2p1-4ubuntu0.fips.0.121:8.2p1-4ubuntu0.fips.0.131:8.2p1-4ubuntu0.fips.0.13.11:8.2p1-4ubuntu0.fips.0.13.3
 None known
openssh
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
1:8.2p1-4ubuntu0.fips.0.2.1
 None known
openssh-ssh1
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:7.5p1-121:7.5p1-12build11:7.5p1-13
 None known
openssh
Ubuntu:Pro:FIPS-preview:22.04:LTS
 All versions, plus listed versions
1:8.9p1-3ubuntu0.4+Fips11:8.9p1-3ubuntu0.4+Fips31:8.9p1-3ubuntu1.fips.0~ppa3
 None known
openssh
Ubuntu:Pro:FIPS-updates:22.04:LTS
 All versions, plus listed versions
1:8.9p1-3ubuntu0.4+Fips11:8.9p1-3ubuntu0.4+Fips31:8.9p1-3ubuntu0.6+Fips11:8.9p1-3ubuntu0.7+Fips11:8.9p1-3ubuntu0.10+Fips1
Show 8 moreShow less
1:8.9p1-3ubuntu0.11+Fips11:8.9p1-3ubuntu0.13+Fips11:8.9p1-3ubuntu0.14+Fips11:8.9p1-3ubuntu0.15+Fips11:8.9p1-3ubuntu0.15+Fips31:8.9p1-3ubuntu0.16+Fips31:8.9p1-3ubuntu0.18+Fips11:8.9p1-3ubuntu1.fips.0~ppa3
 None known
openssh-ssh1
Ubuntu:24.04:LTS
 All versions, plus listed versions
1:7.5p1-141:7.5p1-151:7.5p1-15build11:7.5p1-16
 None known
openssh
Ubuntu:Pro:FIPS-updates:24.04:LTS
 All versions, plus listed versions
1:9.6p1-3ubuntu13.7+Fips11:9.6p1-3ubuntu13.12+Fips11:9.6p1-3ubuntu13.13+Fips11:9.6p1-3ubuntu13.14+Fips11:9.6p1-3ubuntu13.15+Fips1
Show 5 moreShow less
1:9.6p1-3ubuntu13.16+Fips11:9.6p1-3ubuntu13.16+Fips21:9.6p1-3ubuntu13.18+Fips11:9.6p1-3ubuntu13.19+Fips11:9.6p1-3ubuntu13.20+Fips1
 None known
openssh-ssh1
Ubuntu:25.10
 All versions, plus listed versions
1:7.5p1-17
 None known
openssh-ssh1
Ubuntu:26.10
 All versions, plus listed versions
1:7.5p1-181:7.5p1-18ubuntu11:7.5p1-18ubuntu2
 None known
openssh-ssh1
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:7.5p1-171:7.5p1-18
 None known

History

History
RecordedChangedSources
affectedCVE List, EUVD, NVD
factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-55653 is a medium vulnerability (CVSS 4.3) in Openbsd Openssh, published June 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 45th percentile. Fixed in openssh 8.7p1-30.el9_2.tuxcare.els13.

References

Show 110 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open