JLSEC-2026-65

🗓️ 09 Apr 2026 21:32:46Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

OpenSSH 6.2–8.x before 8.8 enables privilege escalation from misinitialized supplemental groups.

Reporter	Title	Published	Views	Family All 204
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to privilege escalation due to CVE-2021-41617	22 Jun 202210:25	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSH for IBM i is affected by CVE-2021-41617	1 Dec 202123:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System (Sailfish) [CVE-2023-51385, CVE-2023-48795, CVE-2023-38408, CVE-2020-15778, CVE-2021-41617].	20 May 202509:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects AIX (CVE-2021-41617)	18 May 202214:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Polkit, Node.js, OpenSSH, and Golang Go affect IBM Spectrum Protect Plus (CVE-2021-4034, CVE-2022-21681, CVE-2022-21680, CVE-2022-0235, CVE-2021-41617, CVE-2021-44716, CVE-2021-44717, 218243)	12 Mar 202201:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is using components with known vulnerabilities	31 Mar 202214:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2019-10086, CVE-2021-41617)	23 Jun 202216:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System	16 Feb 202210:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Vulnerability in OpenSSH. (CVE-2021-41617)	7 Jul 202210:45	–	ibm

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
lists	www.lists.debian.org/debian-lts-announce/2023/12/msg00017.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/
security	www.security.netapp.com/advisory/ntap-20211014-0004/
debian	www.debian.org/security/2023/dsa-5586
openssh	www.openssh.com/security.html
openssh	www.openssh.com/txt/release-8.8
openwall	www.openwall.com/lists/oss-security/2021/09/26/1

09 Apr 2026 21:45Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.4

CVSS 3.17

EPSS0.00274

OpenSSH Privilege escalation Supplemental groups Non-default settings