Cisco Nexus Dashboard Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Nexus Dashboard is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Nexus Dashboard due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after whi...

Cisco Desk Phone 9841 and 9851 Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Desk Phone 9841 and 9851 are affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Desk Phone 9841 and 9851 due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime...

Cisco Emergency Responder Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco Emergency Responder is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Emergency Responder due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds,...

Cisco UCS Manager Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco UCS Manager is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco UCS Manager due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after which the...

Juniper Junos OS Multiple Vulnerabilities (JSA92873)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA92873 advisory. - A race condition in sshd affecting versions between 8.5p1 and 9.7p1 inclusive may allow arbitrary code execution with root privileges. Successful exploitation has...

JLSEC-2026-73 In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation...

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding...

PT-2026-33682

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with...

Security Bulletin: Multiple vulnerabilties affects IBM DB2 Data Management Console

Summary traverse-7.17.3.tgz , sshd-core-1.7.0.jar dependency packages are being used by IBM Db2 Data Management Console. This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID:CVE-2022-45047 DESCRIPTION: Class...

EUVD-2023-48031

EVE: SSH as Root Unlockable Without Triggering Measured Boot...

CVE-1999-0248

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

org.jenkins-ci.main:jenkins-test-harness (1.444), org.jenkins-ci.main:jenkins-war (1.444) +10 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.444)

org.jenkins-ci.main:jenkins-core MAVEN version 1.444 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.444 - org.jenkins-ci.main:jenkins-war 1.444 -...

org.jenkins-ci.main:jenkins-test-harness (1.444), org.jenkins-ci.main:jenkins-war (1.444) +10 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.444)

org.jenkins-ci.main:jenkins-core MAVEN version 1.444 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.444 - org.jenkins-ci.main:jenkins-war 1.444 -...

TencentOS Server 4: apache-sshd (TSSA-2025:0563)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0563 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding

A flaw was found in OpenSSH. In affected versions of sshd, the DisableForwarding directive does not fully adhere to the intended functionality as documented. Specifically, it fails to disable X11 and agent forwarding, which may allow unintended access under certain configurations...

Moderate: Red Hat Security Advisory: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

ALSA-2025:20126 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding CVE-2025-32728 For more details abo...