Skip to content
Openbsd vulnerabilities
Newest
-
openbsd openssh
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround...
CVE-2026-123158
8.1 High
-
libressl
LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response
CVE-2026-118374
8.2 High
-
libressl
LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()
CVE-2026-118373
6.3 Medium
-
libressl
LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path
CVE-2026-118372
6.3 Medium
-
libressl
LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line
CVE-2026-118371
6.3 Medium
-
openbsd openssh
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading...
CVE-2026-106583
Fix available
2.5 Low
-
openbsd openssh
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd...
CVE-2026-106589
2.9 Low
-
openbsd openssh
In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss...
CVE-2026-106588
3.1 Low
-
openbsd openssh
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes...
CVE-2026-106587
Fix available
3.6 Low
-
openbsd openssh
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be...
CVE-2026-106586
Fix available
2.5 Low
-
openbsd openssh
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length...
CVE-2026-106585
Fix available
6.5 Medium
-
openbsd openssh
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because...
CVE-2026-106584
Fix available
2.5 Low
-
openbsd openssh
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is...
CVE-2026-106582
Fix available
3.7 Low
-
openbsd openssh
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be...
CVE-2026-106555
Fix available
2.2 Low
-
openbsd openssh
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a...
CVE-2026-106553
Fix available
2.2 Low
-
openbsd openssh
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be...
CVE-2026-106552
Fix available
4.2 Medium
-
openbsd
In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication...
CVE-2026-103547
9.2 Critical
-
openbsd
OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS
CVE-2026-56101
6.0 Medium
-
openbsd openssh
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be...
CVE-2026-73283
Fix available
2.5 Low
-
openbsd openssh
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of...
CVE-2026-73282
Fix available
4.8 Medium
-
openbsd openssh
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...
CVE-2026-73281
Fix available
3.5 Low
-
openbsd openssh
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a...
CVE-2026-60002
Fix available
7.7 High
-
openbsd openssh
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
CVE-2026-60001
Fix available
6.5 Medium
-
openbsd openssh
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource...
CVE-2026-60000
Fix available
3.7 Low
-
openbsd openssh
In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over...
CVE-2026-59999
Fix available
5.9 Medium
-
openbsd openssh
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...
CVE-2026-59998
Fix available
4.8 Medium
-
openbsd openssh
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,...
CVE-2026-59997
Fix available
4.2 Medium
-
openbsd openssh
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when...
CVE-2026-59996
Fix available
4.2 Medium
-
openbsd openssh
sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...
CVE-2026-59995
Fix available
4.2 Medium
-
openbsd
sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege...
CVE-2026-57589
7.4 High
-
openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +7 more +9 more
Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination
CVE-2026-55654
Fix available
3.7 Low
-
openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +17 more +19 more
Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
CVE-2026-55655
Fix available
5.0 Medium
-
openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +18 more +20 more
Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
CVE-2026-55653
Fix available
4.3 Medium
-
openbsd, netbsd src +1 more
OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input
CVE-2026-56099
6.9 Medium
-
openbsd
sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass...
CVE-2026-55706
5.8 Medium
-
openbsd
In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a...
CVE-2026-41285
Public exploit
4.3 Medium
-
openbsd openssh
OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios...
CVE-2026-35414
Public exploitFix available
4.2 Medium
-
openbsd openssh
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.
CVE-2026-35388
Fix available
2.5 Low
-
openbsd openssh
OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in...
CVE-2026-35387
Fix available
3.1 Low
-
openbsd openssh
In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within...
CVE-2026-35386
Fix available
3.6 Low
-
openbsd openssh, red hat multicluster engine for kubernetes, openshift pipelines +29 more +31 more
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome...
CVE-2026-35385
Fix available
7.5 High
-
debian linux, openbsd openssh, canonical ubuntu linux +37 more +39 more
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...
CVE-2026-3497
Fix available
2.7 Low
-
openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to...
CVE-2025-61985
Fix available
3.6 Low
-
openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...
CVE-2025-61984
Public exploitFix available
3.6 Low
-
openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the...
CVE-2025-32728
Fix available
4.3 Medium
-
openbsd
OpenBSD wg(4) kernel crash
CVE-2025-30334
7.1 High
-
openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 more
Openssh: denial-of-service in openssh
CVE-2025-26466
Public exploitFix available
EPSS 38.7%
5.9 Medium
-
openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 more
Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled
CVE-2025-26465
Public exploitFix available
6.8 Medium
-
openbsd
OpenBSD vmm GDTR limits
CVE-2024-11149
6.2 Medium
-
openbsd
OpenBSD readdir directory traversal
CVE-2024-10933
4.1 Medium
- Show olderLoading…