Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: OpenBSD OpenSSH 10.3 Clear all filters
TI-2026-27550 CVE-2026-35414 · GHSA-f6c7-fj8h-5898

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon…

Priority LOW 35

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00218 Published 2026-04-02 Partial fix · 10.3 CWE-670
TI-2026-27521 CVE-2026-35385 · GHSA-jgqr-738j-43cg

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an…

Priority LOW 38

In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00573 Published 2026-04-02 Partial fix · 10.3 CWE-281