1372 matches found
CVE-2026-106553
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt...
CVE-2026-106553
The OpenSSH sshd daemon versions before 10.6 are vulnerable to a flaw where credentials can incorrectly persist following a failed GSSAPIAuthentication attempt. This issue is associated with CWE-669 (Incorrect Resource Transfer Between Spheres). While the vulnerability's severity is rated as HIGH...
CVE-2026-106553
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt...
CVE-2026-106553
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt...
CVE-2026-106553
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt...
CVE-2026-106553
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt...
CVE-2026-106553
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt...
openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options
A flaw was found in sshd, the OpenSSH server daemon. When DisableForwarding=yes is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over PermitTunnel=yes. This allows a remote attacker to bypass intended security restrictions and establish a tunnel,...
openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay
A flaw was found in OpenSSH's SSH daemon sshd. A remote attacker could exploit this vulnerability by repeatedly attempting authentication. The flaw allows the attacker to bypass the intended minimum authentication delay, which can facilitate brute-force attacks. This makes it easier for an attack...
Path Traversal
Apache MINA SSHD is vulnerable to path traversal. The vulnerability is due to insufficient path validation on Windows, where the sshd-git component fails to properly restrict file system paths and an authenticated remote user can craft directory traversal sequences to access git repositories...
CLEANSTART-2026-HK92541 Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795
Security vulnerability affects the sonarqube package. Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795...
CVE-2026-106587: Access of Resource Using Incompatible Type
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled...
PT-2026-107274
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.6 Description In sshd, credentials may incorrectly persist following a failed GSSAPIAuthentication authentication attempt. Recommendations Update to version 10.6 or later...
PT-2026-107275
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.6 Description In the sshd component, the GSSAPIAuthentication authentication state may be incorrectly persisted across multiple authentication attempts. Recommendations Update to version 10.6 or later...
PT-2026-107276
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.6 Description In sshd and ssh, an LZ77 dictionary coder can be used despite findings from arXiv 2609.07709 "Crossing the Streams" which contraindicate its use. LZ77 is a lossless data compression algorithm used to...
PT-2026-107283
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.6 Description The sshd and ssh components fail to verify if the maximum packet length is exceeded when decompressing highly compressed data. Recommendations Update to version 10.6 or later...
PT-2026-107284
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.6 Description In sshd, the restrict keyword within the authorized keys file was intended to apply to tunnel forwarding but failed to do so. Recommendations Update to version 10.6 or later...
PT-2026-107285
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.6 Description In sshd, a configuration option value of "none" is occasionally misinterpreted as a filename instead of being recognized as a command to disable a specific feature. Recommendations Update to version...
CVE-2026-106553: Incorrect Resource Transfer Between Spheres
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt...
CVE-2026-106555: Incorrect Resource Transfer Between Spheres
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts...