{"id":"CVE-2026-55655","aliases":["ALSA-2026:47755","ALSA-2026:47756","ALSA-2026:47757","AZL-91197","BELL-CVE-2026-55655","CLSA-2026-1785143860","CLSA-2026-1785153163","DEBIAN-CVE-2026-55655","EUVD-2026-38413","GHSA-wcvf-3x75-j4c6","MGASA-2026-0521","RHSA-2026:36759","RHSA-2026:47755","RHSA-2026:47756","RHSA-2026:47757","RHSA-2026:76748","RHSA-2026:76993","RHSA-2026:80513","RLSA-2026:47755","RLSA-2026:47756","RLSA-2026:47757","UBUNTU-CVE-2026-55655"],"status":"published","title":"Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions","description":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","severity":{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00124,"percentile":0.02149,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-923"],"published":"2026-06-23T03:36:25Z","modified":"2026-11-05T22:18:48Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh","fixed_in":["8.7p1-45.el9_6.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-askpass","fixed_in":["8.7p1-45.el9_6.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-clients","fixed_in":["8.7p1-45.el9_6.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-keycat","fixed_in":["8.7p1-45.el9_6.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-server","fixed_in":["8.7p1-45.el9_6.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-sk-dummy","fixed_in":["8.7p1-45.el9_6.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"pam_ssh_agent_auth","fixed_in":["0.10.4-5.45.el9_6.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh","fixed_in":["8.7p1-30.el9_2.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-askpass","fixed_in":["8.7p1-30.el9_2.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-clients","fixed_in":["8.7p1-30.el9_2.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-keycat","fixed_in":["8.7p1-30.el9_2.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-server","fixed_in":["8.7p1-30.el9_2.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-sk-dummy","fixed_in":["8.7p1-30.el9_2.tuxcare.els22"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam_ssh_agent_auth","fixed_in":["0.10.4-5.30.el9_2.tuxcare.els22"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.3-7.30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-9.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-9.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-9.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-9.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-9.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-7.9.el9_8.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-25.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-25.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-25.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-25.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-25.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.9p1-25.el10_2.alma.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Azure Linux:3","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"9.8p1-10"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9_6.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9_6.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9_6.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9_6.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9_6.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"openssh-sk-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-45.el9_6.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-5.45.el9_6.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openssh-sk-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.7p1-30.el9_2.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-5.30.el9_2.tuxcare.els22"}]}]},{"source":"osv","ecosystem":"Mageia:10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0p1-4.1.mga10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3p1-6.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3p1-6.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3p1-6.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3p1-6.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3p1-6.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3p1-6.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-sk-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.3p1-6.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-cavs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-cavs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-cavs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.3-7.30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-7.9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-7.9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam_ssh_agent_auth-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-7.9.el9_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-askpass-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-keycat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-keysign-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-sk-dummy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-7.el10_0.5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-7.el10_0.5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-7.el10_0.5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-7.el10_0.5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-7.el10_0.5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-7.el10_0.5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-38.el9_4.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-38.el9_4.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-45.el9_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"pam_ssh_agent_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.4-5.45.el9_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-45.el9_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-45.el9_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-45.el9_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7p1-45.el9_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0p1-30.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-9.el9_8.rocky.0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.9p1-25.el10_2.rocky.0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-8","1:7.5p1-9","1:7.5p1-9build1","1:7.5p1-10"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-11build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-12","1:7.5p1-12build1","1:7.5p1-13"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-14","1:7.5p1-15","1:7.5p1-15build1","1:7.5p1-16"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.9p1-3ubuntu3","1:9.9p1-3ubuntu3.1","1:10.0p1-5ubuntu2","1:10.0p1-5ubuntu3","1:10.0p1-5ubuntu4","1:10.0p1-5ubuntu5","1:10.0p1-5ubuntu5.1","1:10.0p1-5ubuntu5.4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-18","1:7.5p1-18ubuntu1","1:7.5p1-18ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17","1:7.5p1-18"]}],"products":[{"vendor":"openbsd","product":"openssh"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift ai 3.0"},{"vendor":"red hat","product":"red hat openshift ai 3.2"},{"vendor":"red hat","product":"red hat openshift ai 3.3"},{"vendor":"red hat","product":"red hat openshift ai 3.4"},{"vendor":"red hat","product":"red hat openshift ai 3.5"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 5"},{"vendor":"red hat","product":"red hat update infrastructure 5"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:36759","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47755","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47756","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47757","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54387","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76748","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76993","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:80513","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82749","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82750","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82751","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82752","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82753","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82754","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82755","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82756","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82757","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82758","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82759","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82761","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82762","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82763","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82897","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82898","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82899","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82900","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82901","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82902","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82903","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82904","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82907","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82908","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82909","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82910","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82912","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82913","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82914","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82915","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82916","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82917","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82918","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82920","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82921","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82922","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82923","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89739","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91232","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55655","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462250","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55655","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wcvf-3x75-j4c6"},{"url":"https://access.redhat.com/security/cve/CVE-2026-55653","tags":["report"]},{"url":"https://bugzilla.redhat.com/2462250","tags":["report"]},{"url":"https://bugzilla.redhat.com/2462351","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-47755.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55654","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59996","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-60002","tags":["report"]},{"url":"https://bugzilla.redhat.com/2462493","tags":["report"]},{"url":"https://bugzilla.redhat.com/2497936","tags":["report"]},{"url":"https://bugzilla.redhat.com/2497944","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-47756.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-47757.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-55655","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785143860.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785153163.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55655.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-55655","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0521.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35876","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FAMKD5T6664L7TA7EBJFLZB2RX3AQYZ/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8533-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2ZK2T3OFPOIBFAZQAJISQ7EML4PHYVB/","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/08/12/1","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRB2YTKIEJGFGAKEXYAPCDQSKUFBEI7B/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8721-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8928-1","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36759.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462351","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55653","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55653","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462493","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55654","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55655","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47755.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2497936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2497944","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47756.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59996","tags":["advisory"]},{"url":"https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2","tags":["article"]},{"url":"https://www.openssh.org/releasenotes.html#10.4p1","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2026/07/06/5","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-60002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60002","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47757.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2497927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2497938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2497942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2514328","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76748.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59995","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59995","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59995","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59999","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59999","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-60001","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-60001","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-60001","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73282","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73282","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73282","tags":["advisory"]},{"url":"https://www.openssh.org/releasenotes.html#10.5","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76993.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80513.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:47755","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:47756","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:47757","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-55655","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-55655","title":"Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions","description":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","status":"published","published":"2026-06-23T03:36:25.724Z","modified":"2026-11-05T21:46:02.857Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-923"],"updated_at":"2026-11-05T22:55:20.139479Z"}],"euvd":[{"id":"EUVD-2026-38413","description":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","status":"published","published":"2026-06-23T03:36:25Z","modified":"2026-11-05T21:46:02Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-05T23:02:19.769742Z"}],"ghsa":[{"id":"GHSA-wcvf-3x75-j4c6","title":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack...","description":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","status":"published","published":"2026-06-23T06:30:41Z","modified":"2026-10-30T00:30:33Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium"}],"cwes":["CWE-923"],"updated_at":"2026-11-02T15:14:41.240878Z"}],"nvd":[{"id":"CVE-2026-55655","description":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","status":"published","published":"2026-06-23T04:17:40.787Z","modified":"2026-11-05T22:18:48.84Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-923"],"updated_at":"2026-11-05T23:57:19.370761Z"}],"osv":[{"id":"BELL-CVE-2026-55655","title":"CVE-2026-55655 does not affect BellSoft software","status":"withdrawn","published":"2026-06-24T06:11:28.431635Z","modified":"2026-07-16T07:15:09.885261781Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:24.657778Z"},{"id":"CVE-2026-55655","title":"Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions","description":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","status":"published","published":"2026-06-23T03:36:25.724Z","modified":"2026-11-07T02:31:12.829121731Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium"}],"cwes":["CWE-923"],"updated_at":"2026-11-07T03:08:07.572818Z"},{"id":"DEBIAN-CVE-2026-55655","description":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","status":"withdrawn","published":"2026-06-23T04:17:40.787Z","modified":"2026-08-31T20:00:13.044823107Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:57.590991Z"},{"id":"RHSA-2026:36759","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-07-09T10:12:50Z","modified":"2026-10-15T10:17:53Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:47755","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-07-30T10:17:48Z","modified":"2026-10-17T10:14:38Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:47756","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-07-30T10:17:48Z","modified":"2026-10-17T10:14:39Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:47757","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-07-30T10:17:49Z","modified":"2026-10-17T10:14:40Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:76748","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-10-07T10:20:10Z","modified":"2026-10-17T10:20:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:76993","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-10-07T10:20:18Z","modified":"2026-10-17T10:20:11Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:80513","title":"Red Hat Security Advisory: openssh security update","status":"published","published":"2026-10-14T10:31:49Z","modified":"2026-10-17T10:20:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:47755","title":"Moderate: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions (CVE-2026-55655)\n\n* openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-30T12:00:53.025496Z","modified":"2026-07-30T12:30:06.801883462Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:47756","title":"Important: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions (CVE-2026-55655)\n\n* openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)\n\n* openssh: Heap out-of-bounds read in Rocky Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)\n\n* openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)\n\n* openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-30T18:03:34.878221Z","modified":"2026-07-30T18:25:51.612957622Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:47757","title":"Important: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.\n\nSecurity Fix(es):\n\n* openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions (CVE-2026-55655)\n\n* openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)\n\n* openssh: Heap out-of-bounds read in Rocky Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)\n\n* openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)\n\n* openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-30T12:06:30.380063Z","modified":"2026-07-30T12:30:06.784792849Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-55655","description":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","status":"published","published":"2026-06-23T04:17:00Z","modified":"2026-10-17T12:59:07.802590008Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","level":"medium"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:56:41.382716Z"},{"id":"ALSA-2026:47755","title":"Moderate: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  \n\nSecurity Fix(es):  \n\n  * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655)\n  * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-29T00:00:00Z","modified":"2026-10-29T11:02:24.759791749Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:47756","title":"Important: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  \n\nSecurity Fix(es):  \n\n  * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655)\n  * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)\n  * openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)\n  * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)\n  * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-29T00:00:00Z","modified":"2026-10-29T11:32:22.620178167Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:47757","title":"Important: openssh security update","description":"OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.  \n\nSecurity Fix(es):  \n\n  * openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655)\n  * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)\n  * openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)\n  * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)\n  * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-29T00:00:00Z","modified":"2026-10-29T11:30:36.912910099Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-91197","title":"CVE-2026-55655 affecting package openssh 9.8p1-10","description":"A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.","status":"published","published":"2026-06-23T04:17:40Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.633663Z"},{"id":"CLSA-2026-1785143860","title":"openssh: Fix of CVE-2026-55655","description":"- CVE-2026-55655: gate the client-side abstract X11 socket behind\n  SSH_INSECURE_ABSTRACT_SOCKET_ENABLED to prevent MITM of forwarded X11\n  via abstract UNIX socket pre-binding; backport downstream f5884eb","status":"published","published":"2026-07-27T09:17:51Z","modified":"2026-10-26T09:31:23.833908413Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785153163","title":"openssh: Fix of CVE-2026-55655","description":"- CVE-2026-55655: gate the client-side abstract X11 socket behind\n  SSH_INSECURE_ABSTRACT_SOCKET_ENABLED to prevent MITM of forwarded X11\n  via abstract UNIX socket pre-binding; backport downstream f5884eb","status":"published","published":"2026-07-27T11:52:54Z","modified":"2026-10-26T09:30:29.901632029Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"MGASA-2026-0521","title":"Updated openssh packages fix security vulnerabilities","description":"Local mitm of x11 forwarding via abstract unix socket pre-binding in Red\nHat Enterprise Linux openssh client versions. (CVE-2026-55655)\nsftp in OpenSSH before 10.4 does not properly constrain the location of\ndownloaded files when \"sftp server:/path .\" is used with an\nattacker-controlled server. (CVE-2026-59995)\nscp in OpenSSH before 10.4 may place a file in the parent directory of\nan intended directory when the copy occurs between two remote\ndestinations. (CVE-2026-59996)\ninternal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9\ncommand-line arguments, which can be important if a later command-line\nargument would have helped to ensure the intended security properties of\nan SFTP connection. (CVE-2026-59997)\nsshd in OpenSSH before 10.4 has an undocumented security-relevant\nbehavior: GSSAPIStrictAcceptorCheck has no value if the server is in\nWindows Active Directory. (CVE-2026-59998)\nIn sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to\ntake precedence over PermitTunnel=yes, but did not. (CVE-2026-59999)\nsshd in OpenSSH before 10.4 allows remote attackers to cause a denial of\nservice (resource consumption from excessive authentication attempts)\nbecause MaxAuthTries was mishandled for GSSAPIAuthentication.\n(CVE-2026-60000)\nsshd in OpenSSH before 10.4 does not always honor the minimum\nauthentication delay. (CVE-2026-60001)\nssh in OpenSSH before 10.4 can have a use-after-free when a server\nchanges its host key during a key re-exchange. (This outcome occurs only\non the client side.). (CVE-2026-60002)\nIn ssh-agent in OpenSSH before 10.5, some operations can occur remotely\nbut were intended to occur only locally, including operations that add\ntokens or use keys. This is caused by misinteraction between agent\nlocking and the session-bind@openssh.com extension. (CVE-2026-73281)\nIn ssh in OpenSSH before 10.5, a use-after-free for realloc data can\noccur if a certain pair of remote-forwarding operations are concurrent.\n(CVE-2026-73282)\nIn sshd in OpenSSH before 10.5, the restrict keyword (in\nauthorized_keys) was supposed to be applicable to tunnel forwarding but\nwas not. (CVE-2026-73283)\nIn sftp in OpenSSH before 10.6, a server can trigger directory traversal\n(causing files to be written to unintended locations) during a recursive\ncopy operation. (CVE-2026-106552)\nIn sshd in OpenSSH before 10.6, credentials can incorrectly persist\nafter failure of a GSSAPIAuthentication authentication attempt.\n(CVE-2026-106553)\nIn sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication\nstate can incorrectly be persisted across authentication attempts.\n(CVE-2026-106555)\nIn sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be\nused even though this is contraindicated by the arXiv 2609.07709\n\"Crossing the Streams\" findings. (CVE-2026-106582)\nIn ssh in OpenSSH before 10.6, a $ or \\ character can occur in a\ncommand-line username, leading to injection. (CVE-2026-106583)\nIn ssh-keygen in OpenSSH before 10.6, certificates could have incorrect\nexpiration times because of Daylight Saving mishandling. There can be a\nslightly more severe effect on users in certain Antarctic locations.\n(CVE-2026-106584)\nIn sshd and ssh in OpenSSH before 10.6, there is no check for whether\nthe maximum packet length is exceeded during decompression of highly\ncompressed data. (CVE-2026-106585)\nIn sshd in OpenSSH before 10.6, the restrict keyword (in\nauthorized_keys) was supposed to be applicable to tunnel forwarding but\nwas not, a different vulnerability than CVE-2026-73283.\n(CVE-2026-106586)\nIn sshd in OpenSSH before 10.6, the value \"none\" for a configuration\noption is sometimes interpreted as a filename but was intended to mean\nthat a feature is disabled. (CVE-2026-106587)\n","status":"published","published":"2026-10-19T16:59:00Z","modified":"2026-10-19T17:13:38.453313742Z","updated_at":"2026-11-02T15:49:43.795591Z"}]}}