CVE-2026-110928

No scoreFix available

authorized_keys restrict does not apply to tunnel forwarding

What each source reports

OSVUBUNTU-CVE-2026-110928 No score

authorized_keys restrict does not apply to tunnel forwarding

Record: UBUNTU-CVE-2026-110928
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`openssh` Alpaquita:23	9.1_p1-r3 up to 9.1_p1-r16	9.1_p1-r16
`openssh` Alpaquita:25	10.0_p1-r7 up to 10.6_p1-r0	10.6_p1-r0
`openssh` Alpaquita:stream	9.3_p1-r7 up to 10.6_p1-r0	10.6_p1-r0
`openssh` BellSoft Hardened Containers:23	9.1_p1-r3 up to 9.1_p1-r16	9.1_p1-r16
`openssh` BellSoft Hardened Containers:25	10.0_p1-r7 up to 10.6_p1-r0	10.6_p1-r0
`openssh` BellSoft Hardened Containers:stream	9.3_p1-r7 up to 10.6_p1-r0	10.6_p1-r0
`openssh` Debian:12	All versions, plus listed versions 1:10.0p1-11:10.0p1-21:10.0p1-31:10.0p1-41:10.0p1-5 Show 45 moreShow less 1:10.0p1-5~bpo12+21:10.0p1-61:10.0p1-71:10.0p1-7~bpo12+11:10.0p1-81:10.1p1-11:10.1p1-21:10.2p1-11:10.2p1-21:10.2p1-2~bpo13+11:10.2p1-31:10.2p1-41:10.2p1-51:10.2p1-61:10.2p1-6~bpo13+11:10.3p1-11:10.3p1-1~bpo13+11:10.3p1-21:10.3p1-31:10.3p1-41:10.3p1-51:10.3p1-71:10.3p1-81:10.3p1-91:10.4p1-11:10.4p1-21:10.4p1-31:10.4p1-41:10.4p1-51:10.5p1-11:10.6p1-11:9.2p1-21:9.2p1-2+deb12u11:9.2p1-2+deb12u101:9.2p1-2+deb12u21:9.2p1-2+deb12u31:9.2p1-2+deb12u41:9.2p1-2+deb12u51:9.2p1-2+deb12u61:9.2p1-2+deb12u71:9.2p1-2+deb12u81:9.2p1-2+deb12u91:9.3p1-11:9.3p1-1+loong641:9.3p2-1	None known
`openssh` Debian:13	All versions, plus listed versions 1:10.0p1-71:10.0p1-7+deb13u11:10.0p1-7+deb13u21:10.0p1-7+deb13u31:10.0p1-7+deb13u4 Show 27 moreShow less 1:10.0p1-81:10.1p1-11:10.1p1-21:10.2p1-11:10.2p1-21:10.2p1-2~bpo13+11:10.2p1-31:10.2p1-41:10.2p1-51:10.2p1-61:10.2p1-6~bpo13+11:10.3p1-11:10.3p1-1~bpo13+11:10.3p1-21:10.3p1-31:10.3p1-41:10.3p1-51:10.3p1-71:10.3p1-81:10.3p1-91:10.4p1-11:10.4p1-21:10.4p1-31:10.4p1-41:10.4p1-51:10.5p1-11:10.6p1-1	None known
`openssh` Debian:14	All versions, plus listed versions 1:10.0p1-71:10.0p1-81:10.1p1-11:10.1p1-21:10.2p1-1 Show 23 moreShow less 1:10.2p1-21:10.2p1-2~bpo13+11:10.2p1-31:10.2p1-41:10.2p1-51:10.2p1-61:10.2p1-6~bpo13+11:10.3p1-11:10.3p1-1~bpo13+11:10.3p1-21:10.3p1-31:10.3p1-41:10.3p1-51:10.3p1-71:10.3p1-81:10.3p1-91:10.4p1-11:10.4p1-21:10.4p1-31:10.4p1-41:10.4p1-51:10.5p1-11:10.6p1-1	None known
`openssh` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 1:6.2p2-61:6.2p2-6ubuntu11:6.4p1-11:6.4p1-21:6.5p1-1 Show 22 moreShow less 1:6.5p1-21:6.5p1-31:6.5p1-41:6.5p1-61:6.6p1-11:6.6p1-21:6.6p1-2ubuntu11:6.6p1-2ubuntu21:6.6p1-2ubuntu2.21:6.6p1-2ubuntu2.31:6.6p1-2ubuntu2.41:6.6p1-2ubuntu2.61:6.6p1-2ubuntu2.71:6.6p1-2ubuntu2.81:6.6p1-2ubuntu2.101:6.6p1-2ubuntu2.111:6.6p1-2ubuntu2.121:6.6p1-2ubuntu2.131:6.6p1-2ubuntu2.13+esm11:6.6p1-2ubuntu2.13+esm21:6.6p1-2ubuntu2.13+esm31:6.6p1-2ubuntu2.13+esm4	None known

Show 23 moreShow less

Affected packages
Package	Affected	Fixed
`openssh` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1:6.9p1-21:6.9p1-31:7.1p1-11:7.1p1-31:7.1p1-4 Show 27 moreShow less 1:7.1p1-61:7.1p2-11:7.1p2-21:7.2p1-11:7.2p2-11:7.2p2-21:7.2p2-31:7.2p2-41:7.2p2-4ubuntu11:7.2p2-4ubuntu2.11:7.2p2-4ubuntu2.21:7.2p2-4ubuntu2.41:7.2p2-4ubuntu2.51:7.2p2-4ubuntu2.61:7.2p2-4ubuntu2.71:7.2p2-4ubuntu2.81:7.2p2-4ubuntu2.101:7.2p2-4ubuntu2.10+esm11:7.2p2-4ubuntu2.10+esm21:7.2p2-4ubuntu2.10+esm31:7.2p2-4ubuntu2.10+esm41:7.2p2-4ubuntu2.10+esm51:7.2p2-4ubuntu2.10+esm61:7.2p2-4ubuntu2.10+esm71:7.2p2-4ubuntu2.10+esm81:7.2p2-4ubuntu2.10+esm91:7.2p2-4ubuntu2.10+esm10	None known
`openssh` Ubuntu:Pro:FIPS-updates:16.04:LTS	All versions, plus listed versions 1:7.2p2-4ubuntu2.fips.2.2.31:7.2p2-4ubuntu2.fips.2.4.11:7.2p2-4ubuntu2.fips.2.4.21:7.2p2-4ubuntu2.fips.2.8.11:7.2p2-4ubuntu2.fips.2.10.1 Show 6 moreShow less 1:7.2p2-4ubuntu2.fips.2.10.21:7.2p2-4ubuntu2.fips.2.10.31:7.2p2-4ubuntu2.fips.2.10.41:7.2p2-4ubuntu2.fips.2.10.51:7.2p2-4ubuntu2.fips.2.10.61:7.2p2-4ubuntu2.fips.2.10.7	None known
`openssh` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 1:7.2p2-4ubuntu2.fips.2.21:7.2p2-4ubuntu2.fips.2.2.11:7.2p2-4ubuntu2.fips.2.10.1	None known
`openssh` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 1:7.5p1-101:7.6p1-41:7.6p1-4ubuntu0.11:7.6p1-4ubuntu0.21:7.6p1-4ubuntu0.3 Show 9 moreShow less 1:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.61:7.6p1-4ubuntu0.71:7.6p1-4ubuntu0.7+esm11:7.6p1-4ubuntu0.7+esm21:7.6p1-4ubuntu0.7+esm31:7.6p1-4ubuntu0.7+esm41:7.6p1-4ubuntu0.7+esm51:7.6p1-4ubuntu0.7+esm6	None known
`openssh-ssh1` Ubuntu:18.04:LTS	All versions, plus listed versions 1:7.5p1-81:7.5p1-91:7.5p1-9build11:7.5p1-10	None known
`openssh` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.21:7.9p1-10~ubuntu18.04.fips.0.31:7.9p1-10~ubuntu18.04.fips.0.41:7.9p1-10~ubuntu18.04.fips.0.5 Show 5 moreShow less 1:7.9p1-10~ubuntu18.04.fips.0.61:7.9p1-10~ubuntu18.04.fips.0.71:7.9p1-10~ubuntu18.04.fips.0.81:7.9p1-10~ubuntu18.04.fips.0.91:7.9p1-10~ubuntu18.04.fips.0.10	None known
`openssh` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.2	None known
`openssh` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 1:8.0p1-6build11:8.1p1-11:8.1p1-51:8.2p1-41:8.2p1-4ubuntu0.1 Show 14 moreShow less 1:8.2p1-4ubuntu0.21:8.2p1-4ubuntu0.31:8.2p1-4ubuntu0.41:8.2p1-4ubuntu0.51:8.2p1-4ubuntu0.71:8.2p1-4ubuntu0.81:8.2p1-4ubuntu0.91:8.2p1-4ubuntu0.101:8.2p1-4ubuntu0.111:8.2p1-4ubuntu0.121:8.2p1-4ubuntu0.131:8.2p1-4ubuntu0.13+esm11:8.2p1-4ubuntu0.13+esm21:8.2p1-4ubuntu0.13+esm3	None known
`openssh-ssh1` Ubuntu:20.04:LTS	All versions, plus listed versions 1:7.5p1-11build1	None known
`openssh` Ubuntu:Pro:FIPS-updates:20.04:LTS	All versions, plus listed versions 1:8.2p1-4ubuntu0.fips.0.2.11:8.2p1-4ubuntu0.fips.0.4.01:8.2p1-4ubuntu0.fips.0.5.01:8.2p1-4ubuntu0.fips.0.71:8.2p1-4ubuntu0.fips.0.8 Show 7 moreShow less 1:8.2p1-4ubuntu0.fips.0.91:8.2p1-4ubuntu0.fips.0.101:8.2p1-4ubuntu0.fips.0.111:8.2p1-4ubuntu0.fips.0.121:8.2p1-4ubuntu0.fips.0.131:8.2p1-4ubuntu0.fips.0.13.11:8.2p1-4ubuntu0.fips.0.13.3	None known
`openssh` Ubuntu:Pro:FIPS:20.04:LTS	All versions, plus listed versions 1:8.2p1-4ubuntu0.fips.0.2.1	None known
`openssh` Ubuntu:22.04:LTS	All versions, plus listed versions 1:8.4p1-6ubuntu21:8.7p1-21:8.7p1-2build11:8.7p1-41:8.8p1-1 Show 15 moreShow less 1:8.9p1-31:8.9p1-3ubuntu0.11:8.9p1-3ubuntu0.31:8.9p1-3ubuntu0.41:8.9p1-3ubuntu0.51:8.9p1-3ubuntu0.61:8.9p1-3ubuntu0.71:8.9p1-3ubuntu0.101:8.9p1-3ubuntu0.111:8.9p1-3ubuntu0.131:8.9p1-3ubuntu0.141:8.9p1-3ubuntu0.151:8.9p1-3ubuntu0.161:8.9p1-3ubuntu0.171:8.9p1-3ubuntu0.18	None known
`openssh-ssh1` Ubuntu:22.04:LTS	All versions, plus listed versions 1:7.5p1-121:7.5p1-12build11:7.5p1-13	None known
`openssh` Ubuntu:Pro:FIPS-preview:22.04:LTS	All versions, plus listed versions 1:8.9p1-3ubuntu0.4+Fips11:8.9p1-3ubuntu0.4+Fips31:8.9p1-3ubuntu1.fips.0~ppa3	None known
`openssh` Ubuntu:Pro:FIPS-updates:22.04:LTS	All versions, plus listed versions 1:8.9p1-3ubuntu0.4+Fips11:8.9p1-3ubuntu0.4+Fips31:8.9p1-3ubuntu0.6+Fips11:8.9p1-3ubuntu0.7+Fips11:8.9p1-3ubuntu0.10+Fips1 Show 8 moreShow less 1:8.9p1-3ubuntu0.11+Fips11:8.9p1-3ubuntu0.13+Fips11:8.9p1-3ubuntu0.14+Fips11:8.9p1-3ubuntu0.15+Fips11:8.9p1-3ubuntu0.15+Fips31:8.9p1-3ubuntu0.16+Fips31:8.9p1-3ubuntu0.18+Fips11:8.9p1-3ubuntu1.fips.0~ppa3	None known
`openssh` Ubuntu:24.04:LTS	All versions, plus listed versions 1:9.3p1-1ubuntu31:9.4p1-1ubuntu11:9.6p1-3ubuntu11:9.6p1-3ubuntu21:9.6p1-3ubuntu11 Show 17 moreShow less 1:9.6p1-3ubuntu121:9.6p1-3ubuntu131:9.6p1-3ubuntu13.31:9.6p1-3ubuntu13.41:9.6p1-3ubuntu13.51:9.6p1-3ubuntu13.71:9.6p1-3ubuntu13.81:9.6p1-3ubuntu13.91:9.6p1-3ubuntu13.111:9.6p1-3ubuntu13.121:9.6p1-3ubuntu13.131:9.6p1-3ubuntu13.141:9.6p1-3ubuntu13.151:9.6p1-3ubuntu13.161:9.6p1-3ubuntu13.181:9.6p1-3ubuntu13.191:9.6p1-3ubuntu13.20	None known
`openssh-ssh1` Ubuntu:24.04:LTS	All versions, plus listed versions 1:7.5p1-141:7.5p1-151:7.5p1-15build11:7.5p1-16	None known
`openssh` Ubuntu:Pro:FIPS-updates:24.04:LTS	All versions, plus listed versions 1:9.6p1-3ubuntu13.7+Fips11:9.6p1-3ubuntu13.12+Fips11:9.6p1-3ubuntu13.13+Fips11:9.6p1-3ubuntu13.14+Fips11:9.6p1-3ubuntu13.15+Fips1 Show 5 moreShow less 1:9.6p1-3ubuntu13.16+Fips11:9.6p1-3ubuntu13.16+Fips21:9.6p1-3ubuntu13.18+Fips11:9.6p1-3ubuntu13.19+Fips11:9.6p1-3ubuntu13.20+Fips1	None known
`openssh` Ubuntu:26.10	All versions, plus listed versions 1:10.2p1-2ubuntu31:10.3p1-4ubuntu11:10.3p1-4ubuntu21:10.5p1-1ubuntu21:10.5p1-1ubuntu3.1	None known
`openssh-gssapi` Ubuntu:26.10	All versions, plus listed versions 1:10.5p1-1ubuntu11:10.5p1-1ubuntu21:10.5p1-1ubuntu31:10.5p1-1ubuntu3.1	None known
`openssh-ssh1` Ubuntu:26.10	All versions, plus listed versions 1:7.5p1-181:7.5p1-18ubuntu11:7.5p1-18ubuntu2	None known
`openssh` Ubuntu:26.04:LTS	All versions, plus listed versions 1:10.0p1-5ubuntu51:10.2p1-2ubuntu11:10.2p1-2ubuntu31:10.2p1-2ubuntu3.21:10.2p1-2ubuntu3.4 Show 4 moreShow less 1:10.2p1-2ubuntu3.51:10.2p1-2ubuntu3.61:10.2p1-2ubuntu3.71:10.2p1-2ubuntu3.8	None known
`openssh-ssh1` Ubuntu:26.04:LTS	All versions, plus listed versions 1:7.5p1-171:7.5p1-18	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-110928 is a vulnerability with no CVSS score yet in openssh, published October 16, 2026. No source lists public exploit code. Fixed in openssh 9.1_p1-r16.

References

This page doesn't list everything

Left out here: 28 versions. The JSON record has them.