https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:16:17.731403+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:47755 ALSA-2026:47755 — Moderate: openssh security update 2026-10-02T17:16:17.815413+00:00

Affected: AlmaLinux:8: openssh, AlmaLinux:8: openssh-askpass, AlmaLinux:8: openssh-cavs, AlmaLinux:8: openssh-clients, AlmaLinux:8: openssh-keycat, AlmaLinux:8: openssh-ldap, AlmaLinux:8: openssh-server, AlmaLinux:8: pam_ssh_agent_auth

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655) * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-55653 Withdrawn: BELL-CVE-2026-55653 — CVE-2026-55653 does not affect BellSoft software 2026-10-02T17:16:17.815495+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2026-avi-1094 certfr-2026-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T17:16:17.815533+00:00 certfr-2026-avi-1094 https://cve.radiocsirt.org/vuln/euvd-2026-362335 EUVD-2026-362335 2026-10-02T17:16:17.815566+00:00 EUVD-2026-362335 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55653 fkie_cve-2026-55653 2026-10-02T17:16:17.815586+00:00

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

 https://cve.radiocsirt.org/vuln/ghsa-28f3-55mq-pp68 GHSA-28f3-55mq-pp68 2026-10-02T17:16:17.815626+00:00

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-55653 msrc_CVE-2026-55653 — Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validat… 2026-10-02T17:16:17.815657+00:00 msrc_CVE-2026-55653 https://cve.radiocsirt.org/vuln/rhsa-2026:36759 RHSA-2026:36759 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T17:16:17.815686+00:00

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions

 https://cve.radiocsirt.org/vuln/rhsa-2026:47755 RHSA-2026:47755 — Red Hat Security Advisory: openssh security update 2026-10-02T17:16:17.815733+00:00

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions

 https://cve.radiocsirt.org/vuln/rlsa-2026:47755 RLSA-2026:47755 — Moderate: openssh security update 2026-10-02T17:16:17.815754+00:00

Affected: Rocky Linux:8: openssh

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions (CVE-2026-55655)

* openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55653 UBUNTU-CVE-2026-55653 2026-10-02T17:16:17.815781+00:00

Affected: Ubuntu:Pro:14.04:LTS: openssh, Ubuntu:Pro:16.04:LTS: openssh, Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:Pro:18.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:Pro:20.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:20.04:LTS: openssh and 8 more

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2039 WID-SEC-W-2026-2039 — OpenSSH: Mehrere Schwachstellen 2026-10-02T17:16:17.815826+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.