OpenSSH · week of 2 Nov 2026

OpenSSH security note

Records on this stack that changed between 2 Nov 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.

What changed

CVE-2026-123158 — Patch now
OpenSSH: Schwachstelle ermöglicht Erlangen von Administratorrechten
Fixed in 9.0_p1-r6 · 3 other ranges on the advisory
CVE-2023-48795 — Patch now
OpenBSD openssh Improper Validation of Integrity Check Value
Affected < 3.66.4

What we still do not know

CVE-2024-6409 — Patch now
A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).
No version range is stored, so an installed version cannot be checked.

Share this note

OpenSSH security note, week of 2 Nov 2026: 2 records have a version a customer can check, and 1 still does not. https://zerodayfindings.com/technologies/openssh/notes/2026-W45