OpenSSH vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
87 matching records
- Critical9.4ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.Check if you run itEPSS 0.30%Jul 8, 2026
- High7.5In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.Check if you run itEPSS 0.16%Jul 8, 2026
- Medium5.4internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have hel…Check if you run itEPSS 0.18%Jul 8, 2026
- Medium5.4scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.Check if you run itEPSS 0.25%Jul 8, 2026
- Medium5.4sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.Check if you run itEPSS 0.25%Jul 8, 2026
- Medium6.5sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.Check if you run itEPSS 0.29%Jul 8, 2026
- High7.5sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled fCheck if you run itEPSS 0.62%Jul 8, 2026
- Medium6.5sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.Check if you run itEPSS 0.18%Jul 8, 2026
- Medium6.1A flaw was found in OpenSSH.Check if you run itEPSS 0.12%Jun 23, 2026
- Medium6.5A flaw was found in OpenSSH.Check if you run itEPSS 0.53%Jun 23, 2026
- Critical9.1When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request.Check if you run itEPSS 0.68%May 22, 2026
- Critical9.1The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag.Check if you run itEPSS 0.48%May 22, 2026
- High8.1OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that…Check if you run itEPSS 0.22%Apr 2, 2026
- Low2.5OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.Check if you run itEPSS 0.13%Apr 2, 2026
- High8.1In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line.Check if you run itEPSS 0.32%Apr 2, 2026
- High8.1In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as ro…Check if you run itEPSS 0.57%Apr 2, 2026
- Medium6.5OpenSSH before 10.3 can use unintended ECDSA algorithms.Check if you run itEPSS 0.24%Apr 2, 2026
- High8.2Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.Check if you run itEPSS 2.38%Mar 12, 2026
- Low3.6ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.Check if you run itEPSS 0.13%Oct 6, 2025
- Low3.6ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommandCheck if you run itEPSS 0.46%Oct 6, 2025
- High8.1An OpenSSH daemon listens on TCP port 22.Check if you run itEPSS 0.57%May 21, 2025
- Medium4.9In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server.Check if you run itEPSS 0.23%Apr 15, 2025
- Low3.8In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.Check if you run itEPSS 0.20%Apr 10, 2025
- Medium5.9A flaw was found in the OpenSSH package.Check this weekEPSS 38.68%Feb 28, 2025
- Medium6.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled.Check if you run itEPSS 7.72%Feb 18, 2025