← Back to feed Search feed

OpenSSH vulnerabilities

38 entries matching openssh — updated 2026-11-02 · vulnfeed

CVE / IDTitleSeverityCVSSEPSSSourceDate
CVE-2026-97816Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityCRITICAL9.863%ileMicrosoft2026-10-13
CVE-2026-83923Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityHIGH8.864%ileMicrosoft2026-10-13
CVE-2026-88157Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityHIGH8.844%ileMicrosoft2026-10-13
CVE-2026-83769Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityHIGH7.835%ileMicrosoft2026-10-13
CVE-2026-97811Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-10-13
CVE-2026-70163Microsoft OpenSSH for Windows Denial of Service VulnerabilityHIGH7.569%ileMicrosoft2026-10-13
CVE-2026-83754Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityHIGH7.552%ileMicrosoft2026-10-13
CVE-2026-83871Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityHIGH7.013%ileMicrosoft2026-10-13
CVE-2026-106585In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decomMEDIUM6.59%ileMicrosoft2026-10-13
CVE-2026-110923Openssh: openssh: sftp can write outside the destination directory from a server-supplied pathMEDIUM6.5—Microsoft2026-10-13
CVE-2026-110926Openssh: openssh: shared lz77 compression dictionary leaks plaintext across channelsMEDIUM5.3—Microsoft2026-10-13
CVE-2026-110924Openssh: openssh: gssapi delegated credentials can be stored after a failed authenticationMEDIUM4.8—Microsoft2026-10-13
CVE-2026-110927Openssh: openssh: a compressed payload can expand past the maximum packet sizeMEDIUM4.3—Microsoft2026-10-13
CVE-2026-106552In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locaMEDIUM4.230%ileMicrosoft2026-10-13
CVE-2026-106582In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the LOW3.78%ileMicrosoft2026-10-13
CVE-2026-106587In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but wLOW3.60%ileMicrosoft2026-10-13
CVE-2026-106589In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedLOW2.90%ileMicrosoft2026-10-13
CVE-2026-106583In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.LOW2.54%ileMicrosoft2026-10-13
CVE-2026-106584In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishLOW2.50%ileMicrosoft2026-10-13
CVE-2026-106586In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarLOW2.52%ileMicrosoft2026-10-13
CVE-2026-106553In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authenticatiLOW2.23%ileMicrosoft2026-10-13
CVE-2026-106555In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authenticaLOW2.23%ileMicrosoft2026-10-13
CVE-2026-69397Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityHIGH7.549%ileMicrosoft2026-09-08
CVE-2026-73282In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operatMEDIUM4.86%ileMicrosoft2026-08-11
CVE-2026-73281In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, includiLOW3.55%ileMicrosoft2026-08-11
CVE-2026-73283In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarLOW2.54%ileMicrosoft2026-08-11
CVE-2026-60002ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This HIGH7.723%ileMicrosoft2026-07-14
CVE-2026-60001sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.MEDIUM6.522%ileMicrosoft2026-07-14
CVE-2026-59999In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did notMEDIUM5.95%ileMicrosoft2026-07-14
CVE-2026-59998sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if thMEDIUM4.88%ileMicrosoft2026-07-14
CVE-2026-59995sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is uMEDIUM4.216%ileMicrosoft2026-07-14
CVE-2026-59996scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs betweeMEDIUM4.216%ileMicrosoft2026-07-14
CVE-2026-59997internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important MEDIUM4.27%ileMicrosoft2026-07-14
CVE-2026-60000sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive auLOW3.750%ileMicrosoft2026-07-14
CVE-2026-55655Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client veMEDIUM5.02%ileMicrosoft2026-06-09
CVE-2026-55653Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validatiMEDIUM4.345%ileMicrosoft2026-06-09
CVE-2025-27731Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityHIGH7.851%ileMicrosoft2025-04-08
CVE-2025-32728In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disMEDIUM4.39%ileMicrosoft2025-04-08