OpenBSD OpenSSH
30 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-106583 | < 10.6 | In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. | HIGH 7.8 | 0.2 % | ||
| CVE-2026-106589 | ≤ 10.6 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privile | LOW 2.9 | 0.1 % | ||
| CVE-2026-106588 | ≤ 10.6 | In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpect | LOW 3.1 | 0.1 % | ||
| CVE-2026-106587 | < 10.6 | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean | LOW 3.6 | 0.1 % | ||
| CVE-2026-106586 | < 10.6 | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a | MEDIUM 4.3 | 0.1 % | ||
| CVE-2026-106585 | < 10.6 | In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly c | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-106584 | < 10.6 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can b | LOW 3.3 | 0.1 % | ||
| CVE-2026-106582 | < 10.6 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Cr | LOW 3.7 | 0.2 % | ||
| CVE-2026-106555 | < 10.6 | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. | HIGH 7.5 | 0.1 % | ||
| CVE-2026-106553 | < 10.6 | In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. | HIGH 7.5 | 0.1 % | ||
| CVE-2026-106552 | < 10.6 | In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recu | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-73283 | < 10.5 | In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. | LOW 2.5 | 0.1 % | ||
| CVE-2026-73282 | < 10.5 | In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-73281 | < 10.5 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that a | LOW 3.5 | 0.2 % | ||
| CVE-2026-60002 | < 10.4 | ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-60001 | < 10.4 | sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-60000 | < 10.4 | sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempt | HIGH 7.5 | 0.6 % | ||
| CVE-2026-59999 | < 10.4 | In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. | HIGH 7.5 | 0.2 % | ||
| CVE-2026-59998 | < 10.4 | sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windo | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-59997 | < 10.4 | internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-l | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-59996 | < 10.4 | scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destina | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-59995 | < 10.4 | sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-35414 | < 10.3 | OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a | HIGH 8.1 | 0.2 % | ||
| CVE-2026-35388 | < 10.3 | OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. | LOW 2.5 | 0.1 % | ||
| CVE-2026-35387 | < 10.3 | OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgo | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-35386 | < 10.3 | In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario w | HIGH 8.1 | 0.3 % | ||
| CVE-2026-35385 | < 10.3 | In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the | HIGH 8.1 | 0.6 % | ||
| CVE-2025-61985 | < 10.1 | ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. | LOW 3.6 | 0.1 % | ||
| CVE-2025-61984 | < 10.1 | ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leadin | LOW 3.6 | 0.5 % | ||
| CVE-2025-32728 | 7.4 – < 10.0 | In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent | MEDIUM 4.3 | 0.2 % |