Openbsd Openssh vulnerabilities

• openbsd openssh sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround... CVE-2026-123158 Public exploitFix available 8.1 HighNovember 5, 2026
• openbsd openssh In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading... CVE-2026-106583 Fix available 2.5 LowOctober 6, 2026
• openbsd openssh In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd... CVE-2026-106589 2.9 LowOctober 6, 2026
• openbsd openssh In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss... CVE-2026-106588 3.1 LowOctober 6, 2026
• openbsd openssh In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes... CVE-2026-106587 Fix available 3.6 LowOctober 6, 2026
• openbsd openssh In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be... CVE-2026-106586 Fix available 2.5 LowOctober 6, 2026
• openbsd openssh In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length... CVE-2026-106585 Fix available 6.5 MediumOctober 6, 2026
• openbsd openssh In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because... CVE-2026-106584 Fix available 2.5 LowOctober 6, 2026
• openbsd openssh In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is... CVE-2026-106582 Fix available 3.7 LowOctober 6, 2026
• openbsd openssh In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be... CVE-2026-106555 Fix available 2.2 LowOctober 6, 2026
• openbsd openssh In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a... CVE-2026-106553 Fix available 2.2 LowOctober 6, 2026
• openbsd openssh In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be... CVE-2026-106552 Fix available 4.2 MediumOctober 6, 2026
• openbsd openssh In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be... CVE-2026-73283 Fix available 2.5 LowAugust 11, 2026
• openbsd openssh In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of... CVE-2026-73282 Fix available 4.8 MediumAugust 11, 2026
• openbsd openssh In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to... CVE-2026-73281 Fix available 3.5 LowAugust 11, 2026
• openbsd openssh ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a... CVE-2026-60002 Fix available 7.7 HighJuly 8, 2026
• openbsd openssh sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. CVE-2026-60001 Fix available 6.5 MediumJuly 8, 2026
• openbsd openssh sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource... CVE-2026-60000 Fix available 3.7 LowJuly 8, 2026
• openbsd openssh In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over... CVE-2026-59999 Fix available 5.9 MediumJuly 8, 2026
• openbsd openssh sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:... CVE-2026-59998 Fix available 4.8 MediumJuly 8, 2026
• openbsd openssh internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,... CVE-2026-59997 Fix available 4.2 MediumJuly 8, 2026
• openbsd openssh scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when... CVE-2026-59996 Fix available 4.2 MediumJuly 8, 2026
• openbsd openssh sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ... CVE-2026-59995 Fix available 4.2 MediumJuly 8, 2026
• openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +8 more +10 more Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination CVE-2026-55654 Fix available 3.7 LowJune 23, 2026
• openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +17 more +19 more Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions CVE-2026-55655 Fix available 5.0 MediumJune 23, 2026
• openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +18 more +20 more Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service CVE-2026-55653 Fix available 4.3 MediumJune 23, 2026
• openbsd openssh OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios... CVE-2026-35414 Public exploitFix available 4.2 MediumApril 2, 2026
• openbsd openssh OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. CVE-2026-35388 Fix available 2.5 LowApril 2, 2026
• openbsd openssh OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in... CVE-2026-35387 Fix available 3.1 LowApril 2, 2026
• openbsd openssh In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within... CVE-2026-35386 Fix available 3.6 LowApril 2, 2026
• openbsd openssh, red hat multicluster engine for kubernetes, openshift pipelines +29 more +31 more In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome... CVE-2026-35385 Fix available 7.5 HighApril 2, 2026
• debian linux, openbsd openssh, canonical ubuntu linux +37 more +39 more Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This... CVE-2026-3497 Fix available 2.7 LowMarch 12, 2026
• openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to... CVE-2025-61985 Fix available 3.6 LowOctober 6, 2025
• openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain... CVE-2025-61984 Public exploitFix available 3.6 LowOctober 6, 2025
• openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the... CVE-2025-32728 Fix available 4.3 MediumApril 10, 2025
• openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 more Openssh: denial-of-service in openssh CVE-2025-26466 Public exploitFix available EPSS 38.7% 5.9 MediumFebruary 18, 2025
• openbsd openssh, debian linux, netapp active iq unified manager +15 more +17 more Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled CVE-2025-26465 Public exploitFix available 6.8 MediumFebruary 18, 2025
• openbsd openssh OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password... CVE-2024-39894 Fix available 7.5 HighJuly 2, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• openbsd openssh, fedoraproject fedora, redhat enterprise linux +1 more +3 more OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for... CVE-2023-51767 Fix availableDisputed 7.0 HighDecember 24, 2023
• openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has... CVE-2023-51385 Public exploitFix available EPSS 19.8% 6.5 MediumDecember 18, 2023
• openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied.... CVE-2023-51384 Fix available 5.5 MediumDecember 18, 2023
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• openbsd openssh, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search... CVE-2023-38408 Public exploitFix available EPSS 79.7% 9.8 CriticalJuly 19, 2023
• openbsd openssh, netapp brocade fabric operating system, hci bootstrap os +4 more +6 more ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop... CVE-2023-28531 Fix available 9.8 CriticalMarch 17, 2023
• openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 more OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms... CVE-2023-25136 Public exploitFix available EPSS 89.8% 6.5 MediumFebruary 3, 2023
• openbsd openssh, debian linux +1 more ** DISPUTED ** An issue was discovered in OpenSSH before 8.9. If a client is using public-key... CVE-2021-36368 Fix availableDisputed 3.7 LowMarch 12, 2022
• openbsd openssh, fedoraproject fedora, netapp active iq unified manager +12 more +14 more sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,... CVE-2021-41617 Public exploitFix available 7.0 HighSeptember 26, 2021
• openbsd openssh, netapp clustered data ontap, hci management node +2 more +4 more OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of... CVE-2016-20012 Public exploitDisputed 5.3 MediumSeptember 15, 2021
• openbsd openssh, fedoraproject fedora, netapp cloud backup +9 more +11 more ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common... CVE-2021-28041 Fix available 7.1 HighMarch 5, 2021
• Show olderLoading…