OpenSSH — security advisories

29 advisories7 sourceslatest 2026-08-20⚡ RSS feed

Every advisory CSIRTS.com has correlated to OpenSSH, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch OpenSSH

Get an email when a new OpenSSH advisory drops — max one per day, one-click unsubscribe.

[NEW] [medium] OpenSSH: Multiple vulnerabilities

mediumcert-bund2026-08-20

[UPDATE] [medium] OpenSSH: Multiple vulnerabilities

mediumCVE-2026-55653 CVE-2026-55654 CVE-2026-55655cert-bund2026-08-17

[NEW] [high] OpenSSH: Multiple vulnerabilities

highcert-bund2026-08-11

CVE-2026-73282: In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

mediumCVSS 4.8CVE-2026-73282msrc2026-08-11

CVE-2026-73281: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.

lowCVSS 3.5CVE-2026-73281msrc2026-08-11

CVE-2026-73283: In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

lowCVSS 2.5CVE-2026-73283msrc2026-08-11

Multiple vulnerabilities in OpenSSH (August 11, 2026)

unknowncert-fr-avis2026-08-11

CVE-2026-35414: OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

mediumCVSS 4.2CVE-2026-35414msrc2026-08-06

CVE-2026-35388: OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

lowCVSS 2.5CVE-2026-35388msrc2026-08-06

[UPDATE] [medium] OpenSSH: Vulnerability allows bypassing of security measures

mediumcert-bund2026-07-30

[UPDATE] [medium] OpenSSH: Multiple vulnerabilities

mediumCVE-2026-35385 CVE-2026-35386 CVE-2026-35387 CVE-2026-35388cert-bund2026-07-22

USN-8577-1: OpenSSH vulnerability

unknownCVE-2026-35414ubuntu2026-07-21

[UPDATE] [low] OpenSSH: Multiple vulnerabilities allow code execution

lowCVE-2025-61984 CVE-2025-61985cert-bund2026-07-21

[UPDATE] [medium] OpenSSH GSSAPI delta: Vulnerability allows unspecified attack

mediumCVE-2026-3497cert-bund2026-07-14

[UPDATE] [medium] OpenSSH: Multiple vulnerabilities allow information disclosure

mediumCVE-2023-51384 CVE-2023-51385cert-bund2026-07-14

[UPDATE] [medium] OpenSSH: Multiple vulnerabilities

mediumCVE-2023-28531cert-bund2026-07-14

[UPDATE] [medium] OpenSSH: Vulnerability allows privilege escalation

mediumcert-bund2026-07-14

CVE-2026-59998: sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

mediumCVSS 4.8CVE-2026-59998msrc2026-07-14

CVE-2026-59997: internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

mediumCVSS 4.2CVE-2026-59997msrc2026-07-14

CVE-2026-59995: sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

mediumCVSS 4.2CVE-2026-59995msrc2026-07-14

CVE-2026-59999: In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

mediumCVSS 5.9CVE-2026-59999msrc2026-07-14

USN-8533-1: OpenSSH vulnerabilities

unknownCVE-2026-59995 CVE-2026-59996 CVE-2026-59997 CVE-2026-59998ubuntu2026-07-13

USN-8514-1: OpenSSH vulnerability

unknownCVE-2026-35385ubuntu2026-07-06

OpenSSH security advisory (AV26-658)

unknowncccs2026-07-06

Multiple vulnerabilities in OpenSSH (July 6, 2026)

unknowncert-fr-avis2026-07-06

CVE-2026-55655: Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

mediumCVSS 5CVE-2026-55655msrc2026-06-09

CVE-2026-55653: Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

mediumCVSS 4.3CVE-2026-55653msrc2026-06-09

Pre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466

unknownCVE-2025-26466fortinet2025-03-11

Vulnerability in OpenSSH (July 1, 2024)

unknownCVE-2024-6387cert-fr-alerte2024-07-01