The vulnerability of the OpenSSH cryptographic protection mechanism, which arises from performing operations in the wrong order, allows attackers to gain access to confidential data and compromise the integrity of that data.

🗓️ 28 Aug 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 12 Views

OpenSSH crypto operations executed in wrong order allowing data exposure and integrity loss.

Reporter	Title	Published	Views	Family All 178
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSH affect AIX	28 May 202621:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to OpenSSH	26 Aug 202609:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Various Vulnerabilities in OpenSSH [CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388]	8 Jun 202620:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	25 May 202613:53	–	ibm
ATTACKERKB	CVE-2026-35386	2 Apr 202616:44	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2026-1745)	27 May 202600:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0102: openssh (ALINUX3-SA-2026:0102)	18 May 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : openssh (ALSA-2026:13380)	4 May 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : openssh (ALSA-2026:13381)	5 May 202600:00	–	nessus
Tenable Nessus	AlmaLinux 8 : openssh (ALSA-2026:13383)	4 May 202600:00	–	nessus

Vulners

Node

OR

red_hat,red_hat_openshift_container_platformMatch4

red_hat,red_hat_discoveryMatch2

red_hat,red_hat_ai_inference_serverMatch3.2

red_hat,red_hat_update_infrastructureMatch5

openbsd opensshRange<10.3

red_hat,red_hat_enterprise_linuxMatch6

red_hat,red_hat_enterprise_linuxMatch7

red_hat,red_hat_enterprise_linuxMatch8

red_hat,red_hat_enterprise_linuxMatch9

red_hat,red_hat_enterprise_linuxMatch10

canonical ubuntuMatch25.10

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-35386
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-35386
github	www.github.com/openssh/openssh-portable/commit/76685c9b09a66435cd2ad8373246adf1c53976d3
openssh	www.openssh.org/releasenotes.html
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0820SE17
deb	www.deb.freexian.com/extended-lts/tracker/CVE-2026-35386
ubuntu	www.ubuntu.com/security/CVE-2026-35386
access	www.access.redhat.com/security/cve/CVE-2026-35386
web	www.web.nvd.nist.gov/view/vuln/detail

28 Aug 2026 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 22.4

CVSS 33.6

EPSS0.00319

OpenSSH Order of Operations Cryptographic Protection Data Exposure Integrity Compromise