OpenSSH
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-26466 | 9.5p1 – 9.9p1 | Openssh: denial-of-service in openssh | MEDIUM 5.9 | 39 % | ||
| CVE-2025-26465 | 6.8p1 – 9.9p1 | Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled | MEDIUM 6.8 | 7.7 % | ||
| CVE-2024-6409 | | Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 | HIGH 7.0 | 28 % | ||
| CVE-2024-6387 | 8.5p1 – 9.7p1 | Openssh: regresshion - race condition in ssh allows rce/dos | HIGH 8.1 | 100 % |