Openbsd OpenSSH vulnerabilities
147 known vulnerabilities affecting openbsd/openssh.
Total CVEs
147
CISA KEV
0
Public exploits
24
Exploited in wild
10
Severity breakdown
CRITICAL13HIGH51MEDIUM63LOW20
Vulnerabilities
Page 8 of 8
CVE-2026-106584P4LOWCVSS 3.3fixed in 10.62026-10-06
CVE-2026-106584 [LOW] CWE-193 CVE-2026-106584: In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.
nvd
CVE-2026-106588P4LOWCVSS 3.1≤ 10.62026-10-06
CVE-2026-106588 [LOW] CWE-653 CVE-2026-106588: In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of s
In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.
nvd
CVE-2026-73283P4LOWCVSS 2.5fixed in 10.52026-08-11
CVE-2026-73283 [LOW] CWE-670 CVE-2026-73283: In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applica
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.
nvd
CVE-2000-0143P4MEDIUMCVSS 4.6≤ 1.2.1v1.22000-02-11
CVE-2000-0143 [MEDIUM] CVE-2000-0143: The SSH protocol server sshd allows local users without shell access to redirect a TCP connection th
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
nvd
CVE-1999-1010P4LOWCVSS 2.1v1.2.271999-12-14
CVE-1999-1010 [LOW] CVE-1999-1010: An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the serv
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
nvd
CVE-2026-35388P4LOWCVSS 2.5fixed in 10.32026-04-02
CVE-2026-35388 [LOW] CWE-420 CVE-2026-35388: OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.
nvd
CVE-2008-3259P4LOWCVSS 1.2≤ 5.0v1.2+69 more2008-07-22
CVE-2008-3259 [LOW] CWE-200 CVE-2008-3259: OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration settin
OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local users on some platforms to hijack the X11 forwarding port via a bind to a single IP address, as demonstrated on the HP-UX platform.
nvd
← Previous8 / 8