OpenSSH vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
89 matching records
- High8.1OpenSSH: Schwachstelle ermöglicht Erlangen von AdministratorrechtenPatch nowKEVEPSS 0.98%Nov 5, 2026
- Medium6.5Moderate: openssh security updateOpen the advisoryOct 22, 2026
- UnknownModerate: openssh security updateOpen the advisoryOct 22, 2026
- Medium6.5Moderate: openssh security updateOpen the advisoryOct 21, 2026
- Medium4.8A flaw was found in OpenSSH.Open the advisoryOct 15, 2026
- Medium4.3A flaw was found in OpenSSH.Open the advisoryOct 15, 2026
- UnknownSecurity update for opensshOpen the advisoryOct 15, 2026
- Medium5.3A flaw was found in OpenSSH.Open the advisoryOct 15, 2026
- Medium5.4A flaw was found in OpenSSH.Open the advisoryOct 15, 2026
- Medium6.5A flaw was found in OpenSSH.Open the advisoryOct 15, 2026
- Medium6.5Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryOct 14, 2026
- High7.0Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.22%Oct 13, 2026
- Critical9.8Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityCheck if you run itEPSS 1.01%Oct 13, 2026
- High7.8Microsoft OpenSSH for Windows Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.29%Oct 13, 2026
- UnknownSecurity update for opensshOpen the advisoryOct 12, 2026
- High7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.Check if you run itEPSS 0.15%Oct 7, 2026
- Low3.6In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.Check if you run itEPSS 0.08%Oct 6, 2026
- Medium6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.Check if you run itEPSS 0.19%Oct 6, 2026
- Low3.3In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling.Check if you run itEPSS 0.06%Oct 6, 2026
- Low3.7In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.Check if you run itEPSS 0.18%Oct 6, 2026
- High7.5In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.Check if you run itEPSS 0.14%Oct 6, 2026
- High7.5In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.Check if you run itEPSS 0.14%Oct 6, 2026
- Medium6.5In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.Check if you run itEPSS 0.36%Oct 6, 2026
- Medium4.8In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.Check if you run itEPSS 0.16%Aug 11, 2026
- Low3.5In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys.Check if you run itEPSS 0.16%Aug 11, 2026