PT-2025-15885

🗓️ 09 Apr 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

OpenSSH prior to 10.0 has forwarding issues not aligned with documentation; update to 10.0 or later.

Reporter	Title	Published	Views	Family All 354
0day.today	OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle Vulnerability	18 Feb 202500:00	–	zdt
IBM Security Bulletins	Security Bulletin: Vulnerability in openssh (CVE-2025-26465) affects Power HMC.	3 Feb 202606:02	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in OpenSSH affects IBM Netezza Appliance	17 Dec 202513:28	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS is vulnerable to an expected behavior violation (CVE-2025-32728) due to OpenSSH	10 Jun 202515:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is vulnerable to a machine-in-the-middle attack due to mishandling error codes when verifying the host key by OpenSSH. [CVE-2025-26465]	14 May 202514:58	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service (CVE-2025-26466) and a machine-in-the-middle attack (CVE-2025-26465) due to OpenSSH	17 Mar 202522:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a machine-in-the-middle attack in OpenSSH [CVE-2025-26465]	28 Aug 202515:21	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access	12 Jan 202623:03	–	ibm
GithubExploit	Exploit for Detection of Error Condition Without Action in Openbsd Openssh	18 Feb 202516:53	–	githubexploit
GithubExploit	Exploit for Allocation of Resources Without Limits or Throttling in Openbsd Openssh	23 Jun 202513:00	–	githubexploit

Source	Link
osv	www.osv.dev/vulnerability/BELL-CVE-2025-32728
osv	www.osv.dev/vulnerability/OESA-2025-1664
osv	www.osv.dev/vulnerability/CVE-2025-32728
reddit	www.reddit.com/r/vmware/comments/1ooh3c5/thanks_for_not_patching_skyline_health
osv	www.osv.dev/vulnerability/SUSE-SU-2025:1576-1
reddit	www.reddit.com/r/kace/comments/1lcrmiv/cve202532728
osv	www.osv.dev/vulnerability/ALPINE-CVE-2025-32728
wiki	www.wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38
twitter	www.twitter.com/Cezar_H_Linux/status/1924492515207512296
docs	www.docs.bell-sw.com/security/cves/CVE-2025-32728

04 Mar 2026 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.14.3 - 6.8

EPSS0.64523

SSVC

openssh software issue version 10.0 update disableforwarding directive x11 forwarding problem