CVE-2026-58624

A flaw was found in the sshd-git component of Apache MINA SSHD, specifically within its GitPgmCommandFactory. An authenticated SSH user could exploit improper input validation to execute arbitrary JGit commands. This allows an attacker to write files to arbitrary locations on the server,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-104810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104810 advisory. In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-104818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104818 advisory. internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-104823)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104823 advisory. sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. Tenable has extracted the preceding description block directly from the Unity Lin...

CVE-2026-56452

A flaw was found in the sshd-scp component of Apache MINA SSHD, a Java library for client-side and server-side SSH. The implementation for receiving files or directories via Secure Copy Protocol SCP did not properly validate filenames. A remote attacker could exploit this by sending specially...

Security Bulletin: IBM Tivoli Netcool Configuration Manager is affected by multiple security vulnerabilities in Apache components that could allow denial of service, excessive resource consumption, application crashes, or unauthorized outbound requests.

Summary IBM Tivoli Netcool Configuration Manager version 6.4.2 addresses multiple vulnerabilities in Apache components. These vulnerabilities could allow attackers to cause denial of service, excessive resource consumption, application crashes, or trigger unauthorized outbound requests through...

Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed in IBM Business Automation Manager Open Editions 9.5.2 Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn b...

OESA-2026-3432 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authentication attempts because MaxAuthTries was mishandled for GSSAPIAuthentication.CVE-2026-60000 sshd in...

OESA-2026-3431 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authentication attempts because MaxAuthTries was mishandled for GSSAPIAuthentication.CVE-2026-60000 sshd in...

OESA-2026-3430 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authentication attempts because MaxAuthTries was mishandled for GSSAPIAuthentication.CVE-2026-60000 sshd in...

CentOS 9 : openssh-9.9p1-12.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the openssh-9.9p1-12.el9 build changelog. - In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. CVE-2026-59999...

CVE-2026-73283

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

JLSEC-2026-1322 sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...

JLSEC-2026-1321 internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,...

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...

JLSEC-2026-1323 In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over...

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...

JLSEC-2026-1325 sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay...

org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation

A flaw was found in Apache MINA SSHD server-side. During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.27.5 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation

A flaw was found in Apache MINA SSHD server-side. During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could...

org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation

A flaw was found in Apache MINA SSHD server-side. During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could...