Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-143710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143710 advisory. In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not. Tenable has extracted the...

MiracleLinux 8 : openssh-8.0p1-34.el8_10 (AXSA:2026-2142:15)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2142:15 advisory. openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-59997 openssh: OpenSSH: Undocumented...

RLSA-2026:88211 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...

openssh security update

An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...

Linux Distros Unpatched Vulnerability : CVE-2026-106586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In sshd in OpenSSH before 10.6, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not, a different vulnerability...

RockyLinux 8 : openssh (RLSA-2026:88211)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:88211 advisory. openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-59997 openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck...

openssh: OpenSSH: Tunnel forwarding restriction bypass

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

Moderate: Red Hat Security Advisory: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

ALSA-2026:88211 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...

SUSE SLES15: openssh / openssh-askpass-gnome / openssh-clients / openssh-common / etc (SUSE-SU-2026:4811-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4811-1 advisory. - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after- free bsc1275074. -...

SUSE SLED15: openssh / openssh-askpass-gnome / openssh-clients / openssh-common / etc (SUSE-SU-2026:4827-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4827-1 advisory. - CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses...

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...

Security update for openssh

This update for openssh fixes the following issues: CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses bsc1275075. CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free bsc1275074...

Security update for openssh

This update for openssh fixes the following issues: CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free bsc1275074. CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses...

SUSE SLES12 Security Update : openssh (SUSE-SU-2026:4686-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4686-1 advisory. - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after- free bsc1275074. -...

Security update for openssh

This update for openssh fixes the following issues: CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free bsc1275074. CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses...

SUSE-SU-2026:4686-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free bsc1275074. - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses...

CVE-2026-110928

A flaw was found in OpenSSH. The authorizedkeys "restrict" keyword was not applied to tunnel forwarding. When PermitTunnel is enabled, a restricted key can still open a tunnel. Mitigation No mitigation is required for Red Hat Enterprise Linux. On other builds, keep PermitTunnel set to no...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-130052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130052 advisory. In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not. Tenable has extracted the...

openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding

A flaw was found in OpenSSH. In configurations where tunnel forwarding is enabled on the server, the restrict option in the authorized keys configuration fails to properly block tunnel forwarding requests. An authenticated user connecting with a restricted key can exploit this issue to bypass...