https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:28:02.518391+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:47756 ALSA-2026:47756 — Important: openssh security update 2026-10-02T15:28:02.936997+00:00

Affected: AlmaLinux:9: openssh, AlmaLinux:9: openssh-askpass, AlmaLinux:9: openssh-clients, AlmaLinux:9: openssh-keycat, AlmaLinux:9: openssh-server, AlmaLinux:9: pam_ssh_agent_auth

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenSSH client versions (CVE-2026-55655) * openssh: Double free in AlmaLinux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653) * openssh: Heap out-of-bounds read in AlmaLinux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654) * openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002) * openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-60002 BELL-CVE-2026-60002 2026-10-02T15:28:02.937095+00:00

Affected: Alpaquita:23: openssh, Alpaquita:25: openssh, Alpaquita:stream: openssh, BellSoft Hardened Containers:23: openssh, BellSoft Hardened Containers:25: openssh, BellSoft Hardened Containers:stream: openssh

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0873 certfr-2026-avi-0873 — De multiples vulnérabilités ont été découvertes dans Microsoft Azure Linux. Elles permettent à un attaquant de provoque… 2026-10-02T15:28:02.937126+00:00 certfr-2026-avi-0873 https://cve.radiocsirt.org/vuln/euvd-2026-333858 EUVD-2026-333858 2026-10-02T15:28:02.937144+00:00 EUVD-2026-333858 https://cve.radiocsirt.org/vuln/fkie_cve-2026-60002 fkie_cve-2026-60002 2026-10-02T15:28:02.937155+00:00

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

 https://cve.radiocsirt.org/vuln/ghsa-gp5v-jg37-fvg6 GHSA-gp5v-jg37-fvg6 2026-10-02T15:28:02.937176+00:00

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-60002 msrc_CVE-2026-60002 — ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This… 2026-10-02T15:28:02.937189+00:00 msrc_CVE-2026-60002 https://cve.radiocsirt.org/vuln/ncsc-2026-0321 NCSC-2026-0321 — Meerdere kwetsbaarheden verholpen in IBM AIX en IBM PowerVM VIOS 2026-10-02T15:28:02.937206+00:00 NCSC-2026-0321 https://cve.radiocsirt.org/vuln/oesa-2026-3429 OESA-2026-3429 — openssh security update 2026-10-02T15:28:02.937408+00:00

Affected: openEuler:20.03-LTS-SP4: openssh

An open source implementation of SSH protocol version 2 Security Fix(es):

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.(CVE-2026-60000)

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.(CVE-2026-60001)

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)(CVE-2026-60002)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21477-1 openSUSE-SU-2026:21477-1 — Security update for openssh 2026-10-02T15:28:02.937434+00:00

Security update for openssh

 https://cve.radiocsirt.org/vuln/rhsa-2026:37382 RHSA-2026:37382 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T15:28:02.937455+00:00

openssh: OpenSSH: sftp client allows attacker to control downloaded file location openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side

 https://cve.radiocsirt.org/vuln/rlsa-2026:47756 RLSA-2026:47756 — Important: openssh security update 2026-10-02T15:28:02.937483+00:00

Affected: Rocky Linux:9: openssh

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions (CVE-2026-55655)

* openssh: Double free in Rocky Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service (CVE-2026-55653)

* openssh: Heap out-of-bounds read in Rocky Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination (CVE-2026-55654)

* openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side (CVE-2026-60002)

* openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy (CVE-2026-59996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:22978-1 SUSE-SU-2026:22978-1 — Security update for openssh 2026-10-02T15:28:02.937510+00:00

Security update for openssh

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-60002 UBUNTU-CVE-2026-60002 2026-10-02T15:28:02.937529+00:00

Affected: Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:20.04:LTS: openssh, Ubuntu:Pro:FIPS:20.04:LTS: openssh, Ubuntu:22.04:LTS: openssh, Ubuntu:22.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-preview:22.04:LTS: openssh and 8 more

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2221 WID-SEC-W-2026-2221 — OpenSSH: Mehrere Schwachstellen 2026-10-02T15:28:02.937570+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.