OpenSSH vulnerabilities

151 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 36 published in the last 12 months.

Latest OpenSSH vulnerabilities

CVE-2026-106583 — (CVSS 7.8)
CVE-2026-106589 — (CVSS 2.9)
CVE-2026-106588 — (CVSS 3.1)
CVE-2026-106587 — (CVSS 3.3)
CVE-2026-106586 — (CVSS 4.3)
CVE-2026-106585 — (CVSS 6.5)
CVE-2026-106584 — (CVSS 3.3)
CVE-2026-106582 — (CVSS 3.7)
CVE-2026-106555 — (CVSS 7.5)
CVE-2026-106553 — (CVSS 7.5)
CVE-2026-106552 — (CVSS 6.5)
CVE-2026-73283 — (CVSS 2.5)
CVE-2026-73282 — (CVSS 4.8)
CVE-2026-73281 — (CVSS 3.5)
CVE-2026-60002 — (CVSS 9.4)
CVE-2026-60001 — (CVSS 6.5)
CVE-2026-60000 — (CVSS 7.5)
CVE-2026-59999 — (CVSS 7.5)
CVE-2026-59998 — (CVSS 6.5)
CVE-2026-59997 — (CVSS 5.4)
CVE-2026-59996 — (CVSS 5.4)
CVE-2026-59995 — (CVSS 5.4)
CVE-2026-55655 — Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions (CVSS 6.1)
CVE-2026-55654 — Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination (CVSS 3.7)
CVE-2026-55653 — Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service (CVSS 6.5)