Read the docs
TI-2026-42777 Aliases CVE-2026-59995GHSA-2prh-86cw-fm96

Path traversal in OpenBSD OpenSSH

Priority LOW 24CWE-23Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · Low
Fix status
Partial Red Hat: 24 fixed, 4 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.

Summary

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0025 16th percentileScored 2026-11-07
Fix Partial OpenSSH (OpenBSD): 10.4Red Hat: 52 advisoriesRed Hat: 24 fixed, 4 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenBSDOpenSSHbefore 10.410.4Patch availableCNA
  • OpenSSH VendorOpenBSD Affected before 10.4 Fixed in 10.4 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*before 10.4VulnerableOpenBSD
  • cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* Versions before 10.4 Vulnerable ·OpenBSD

Remediation

  • Fix · CNA OpenSSH (OpenBSD) Fixed in 10.4

Red Hat 52 advisories

  • RHSA-2026:89197 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.22.20 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202610241758-0, rhcos-ppc64le-4.22.9.8.202610241758-0, rhcos-s390x-4.22.9.8.202610241758-0 +1
  • RHSA-2026:91232 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (CPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:89725 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.18.59 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202610242013-0, rhcos-ppc64le-418.94.202610242013-0, rhcos-s390x-418.94.202610242013-0 +1
Show 49 more Red Hat advisories
  • RHSA-2026:89651 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.19.53 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202610241701-0, rhcos-ppc64le-4.19.9.6.202610241701-0, rhcos-s390x-4.19.9.6.202610241701-0 +1
  • RHSA-2026:89232 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.21.40 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 rhcos-aarch64-4.21.9.6.202610241345-0, rhcos-ppc64le-4.21.9.6.202610241345-0, rhcos-s390x-4.21.9.6.202610241345-0 +1
  • RHSA-2026:89333 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.20.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202610242033-0, rhcos-ppc64le-4.20.9.6.202610242033-0, rhcos-s390x-4.20.9.6.202610242033-0 +1
  • RHSA-2026:89739 Released 2026-10-26 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) openssh-askpass-8.7p1-30.el9_2.13, pam_ssh_agent_auth-0.10.4-5.30.el9_2.13
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) openssh-8.7p1-30.el9_2.13, openssh-clients-8.7p1-30.el9_2.13, openssh-keycat-8.7p1-30.el9_2.13 +1
  • RHSA-2026:82923 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.2.5 (ROCm 7.0)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:82922 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.2.5 (ROCm 6.4)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:82921 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.2.5 (CUDA 12.9)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:82920 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.2.5 (TPU)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:82918 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.5.4 (CUDA 12.9)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:82917 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.3.6 (Spyre)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:82916 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.5.4 (CUDA 13.0)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:82915 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.5.4 (Rubin)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
  • RHSA-2026:82914 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.0.6 (ROCm)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:82913 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.3.6 (CUDA 13.0)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:82912 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.5.4 (TPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:82910 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.5.4 (ROCm 7.14)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
  • RHSA-2026:82909 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.5.4 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:82908 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.5.4 (CPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:82907 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.3.6 (Neuron)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:82904 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.0.6 (TPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:82903 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.0.6 (Spyre)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:82902 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.3.6 (CPU)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:82901 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.4.5 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:82900 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.4.5 (TPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:82899 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.4.5 (Gaudi)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:82898 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.4.5 (ROCm 7.1)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
  • RHSA-2026:82897 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.4.5 (Spyre)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:82763 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.5.4 (Gaudi)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:82762 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.3.6 (ROCm 7.0)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-7.0-rhel9
  • RHSA-2026:82761 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.0.6 (CPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:82759 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.2.5 (CPU)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:82758 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.3.6 (CUDA 12.9)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:82757 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.5.4 (Spyre)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:82756 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.4.5 (ROCm 6.4)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:82755 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.3.6 (ROCm 6.4)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:82754 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.3.6 (TPU)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:82753 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.4.5 (CPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:82752 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.4.5 (CUDA 12.9)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:82751 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.0.6 (CUDA)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:82750 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.2.5 (Spyre)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:82749 Released 2026-10-14 · Red Hat rating Important
    Red Hat AI Base Images 3.4.5 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:80513 Released 2026-10-12 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) openssh-askpass-8.7p1-45.el9_6.5, pam_ssh_agent_auth-0.10.4-5.45.el9_6.5
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) openssh-8.7p1-45.el9_6.5, openssh-clients-8.7p1-45.el9_6.5, openssh-keycat-8.7p1-45.el9_6.5 +1
  • RHSA-2026:76993 Released 2026-10-07 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) openssh-clients-8.7p1-38.el9_4.10, openssh-server-8.7p1-38.el9_4.10
  • RHSA-2026:76748 Released 2026-10-06 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) openssh-askpass-9.9p1-7.el10_0.5, openssh-keysign-9.9p1-7.el10_0.5
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) openssh-9.9p1-7.el10_0.5, openssh-clients-9.9p1-7.el10_0.5, openssh-keycat-9.9p1-7.el10_0.5 +1
  • RHSA-2026:71603 Released 2026-09-24 · Red Hat rating Important
    Red Hat Update Infrastructure 5.3 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
  • RHSA-2026:69130 Released 2026-09-21 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream (v. 9) openssh-askpass-9.9p1-11.el9_8, pam_ssh_agent_auth-0.10.4-8.11.el9_8
    • Red Hat Enterprise Linux BaseOS (v. 9) openssh-9.9p1-11.el9_8, openssh-clients-9.9p1-11.el9_8, openssh-keycat-9.9p1-11.el9_8 +1
  • RHSA-2026:69266 Released 2026-09-21 · Red Hat rating Important
    openssh security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) openssh-askpass-8.0p1-33.el8_10
    • Red Hat Enterprise Linux BaseOS (v. 8) openssh-8.0p1-33.el8_10, openssh-cavs-8.0p1-33.el8_10, openssh-clients-8.0p1-33.el8_10 +4
  • RHSA-2026:69129 Released 2026-09-21 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream (v. 10) openssh-askpass-9.9p1-27.el10_2, openssh-keysign-9.9p1-27.el10_2
    • Red Hat Enterprise Linux BaseOS (v. 10) openssh-9.9p1-27.el10_2, openssh-clients-9.9p1-27.el10_2, openssh-keycat-9.9p1-27.el10_2 +1
  • RHSA-2026:37382 Released 2026-07-09 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images openssh-10.4p1-1.hum1@aarch64, openssh-10.4p1-1.hum1@src, openssh-10.4p1-1.hum1@x86_64 +12

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    OpenBSD OpenSSH 10.4

    8 records Highest priority Priority MEDIUM 1 MEDIUM, 7 LOW

    Other records, highest priority first

    • TI-2026-42784 Use after free in OpenBSD OpenSSHPriority MEDIUM 42
    • TI-2026-42783 sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.Priority LOW 35
    • TI-2026-42782 Resource allocation without limits in OpenBSD OpenSSHPriority LOW 34
    Show all 8 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat OpenShift Container Platform 4Affected—
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:69129
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:69266
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:69130
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:89739
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:80513
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:69129
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:69266
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:69130
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:89739
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:76993
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:76748
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:80513
Red Hat Hardened ImagesFixed RHSA-2026:37382
Red Hat OpenShift AI 3.0Fixed RHSA-2026:82751, RHSA-2026:82761, RHSA-2026:82903, RHSA-2026:82904, RHSA-2026:82914, RHSA-2026:91232
Red Hat OpenShift AI 3.2Fixed RHSA-2026:82750, RHSA-2026:82759, RHSA-2026:82920, RHSA-2026:82921, RHSA-2026:82922, RHSA-2026:82923
Red Hat OpenShift AI 3.3Fixed RHSA-2026:82754, RHSA-2026:82755, RHSA-2026:82758, RHSA-2026:82762, RHSA-2026:82902, RHSA-2026:82907, RHSA-2026:82913, RHSA-2026:82917
Red Hat OpenShift AI 3.4Fixed RHSA-2026:82749, RHSA-2026:82752, RHSA-2026:82753, RHSA-2026:82756, RHSA-2026:82897, RHSA-2026:82898, RHSA-2026:82899, RHSA-2026:82900, RHSA-2026:82901
Red Hat OpenShift AI 3.5Fixed RHSA-2026:82757, RHSA-2026:82763, RHSA-2026:82908, RHSA-2026:82909, RHSA-2026:82910, RHSA-2026:82912, RHSA-2026:82915, RHSA-2026:82916, RHSA-2026:82918
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:89725
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:89651
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:89333
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:89232
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:89197
Red Hat Update Infrastructure 5Fixed RHSA-2026:71603
Not affected: 9 products
  • Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • Red Hat Enterprise Linux AppStream E4S (v.9.4)
  • Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.4)
  • Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • Red Hat Update Infrastructure 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-59995
  2. 2026-10-03 Alias added: GHSA-2prh-86cw-fm96
  3. 2026-10-06 Fix available: Red Hat Enterprise Linux BaseOS EUS (v. 10.0) · Red Hat
  4. 2026-10-07 Fix available: RHSA-2026:76748 · Red Hat
  5. 2026-10-07 Fix available: RHSA-2026:76993 · Red Hat
  6. 2026-10-07 Fix available: Red Hat Enterprise Linux BaseOS E4S (v.9.4) · Red Hat
  7. 2026-10-12 Fix available: RHSA-2026:80513 · Red Hat
  8. 2026-10-12 Fix available: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6) · Red Hat
  9. 2026-10-14 Fix available: RHSA-2026:82749 · Red Hat
  10. 2026-10-15 Fix available: RHSA-2026:82899 · Red Hat
  11. 2026-10-15 Fix available: RHSA-2026:82909 · Red Hat
  12. 2026-10-15 Fix available: RHSA-2026:82918 · Red Hat
  13. 2026-10-15 Fix available: RHSA-2026:82756 · Red Hat
  14. 2026-10-15 Fix available: RHSA-2026:82761 · Red Hat
  15. 2026-10-15 Fix available: RHSA-2026:82907 · Red Hat
  16. 2026-10-15 Fix available: RHSA-2026:82897 · Red Hat
  17. 2026-10-15 Fix available: RHSA-2026:82754 · Red Hat
  18. 2026-10-15 Fix available: RHSA-2026:82916 · Red Hat
  19. 2026-10-15 Fix available: RHSA-2026:82763 · Red Hat
  20. 2026-10-15 Fix available: RHSA-2026:82753 · Red Hat
  21. 2026-10-15 Fix available: RHSA-2026:82758 · Red Hat
  22. 2026-10-15 Fix available: RHSA-2026:82750 · Red Hat
  23. 2026-10-15 Fix available: RHSA-2026:82903 · Red Hat
  24. 2026-10-15 Fix available: RHSA-2026:82914 · Red Hat
  25. 2026-10-15 Fix available: RHSA-2026:82912 · Red Hat
  26. 2026-10-15 Fix available: RHSA-2026:82915 · Red Hat
  27. 2026-10-15 Fix available: RHSA-2026:82921 · Red Hat
  28. 2026-10-15 Fix available: RHSA-2026:82923 · Red Hat
  29. 2026-10-15 Fix available: RHSA-2026:82762 · Red Hat
  30. 2026-10-15 Fix available: RHSA-2026:82902 · Red Hat
  31. 2026-10-15 Fix available: RHSA-2026:82898 · Red Hat
  32. 2026-10-15 Fix available: RHSA-2026:82757 · Red Hat
  33. 2026-10-15 Fix available: RHSA-2026:82920 · Red Hat
  34. 2026-10-15 Fix available: RHSA-2026:82900 · Red Hat
  35. 2026-10-15 Fix available: RHSA-2026:82752 · Red Hat
  36. 2026-10-15 Fix available: RHSA-2026:82917 · Red Hat
  37. 2026-10-15 Fix available: RHSA-2026:82755 · Red Hat
  38. 2026-10-15 Fix available: RHSA-2026:82904 · Red Hat
  39. 2026-10-15 Fix available: RHSA-2026:82901 · Red Hat
  40. 2026-10-15 Fix available: RHSA-2026:82908 · Red Hat
  41. 2026-10-15 Fix available: RHSA-2026:82751 · Red Hat
  42. 2026-10-15 Fix available: RHSA-2026:82913 · Red Hat
  43. 2026-10-15 Fix available: RHSA-2026:82922 · Red Hat
  44. 2026-10-15 Fix available: RHSA-2026:82910 · Red Hat
  45. 2026-10-15 Fix available: RHSA-2026:82759 · Red Hat
  46. 2026-10-16 Fix available: Red Hat OpenShift AI 3.0, Red Hat OpenShift AI 3.2, Red Hat OpenShift AI 3.3 +2 · Red Hat
  47. 2026-10-26 Fix available: RHSA-2026:89739 · Red Hat
  48. 2026-10-26 Fix available: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2) · Red Hat
  49. 2026-10-29 Fix available: RHSA-2026:89232 · Red Hat
  50. 2026-10-29 Fix available: RHSA-2026:89651 · Red Hat
  51. 2026-10-29 Fix available: RHSA-2026:89197 · Red Hat
  52. 2026-10-29 Fix available: RHSA-2026:89725 · Red Hat
  53. 2026-10-29 Fix available: RHSA-2026:89333 · Red Hat
  54. 2026-10-29 Fix available: Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20 +2 · Red Hat
  55. 2026-10-30 Fix available: RHSA-2026:91232 · Red Hat
  56. 2026-10-30 Affected versions changed · Red Hat
  57. 2026-10-30 Affected versions changed · Red Hat

References

Other 3

  • TI-2023-19792 The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently… CVSS 3.1CRITICAL 9.8
  • TI-2024-05929 Openssh: regresshion - race condition in ssh allows rce/dos CVSS 3.1HIGH 8.1
  • TI-2023-10601 OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during… CVSS 3.1MEDIUM 6.5
  • TI-2018-11033 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying… CVSS 3.1MEDIUM 5.9
  • TI-2016-08105 Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4… CVSS 3.1HIGH 7.3
  • TI-2023-28040 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host… CVSS 3.1MEDIUM 6.5
See all 145 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences