https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:52:27.304234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:69129 ALSA-2026:69129 — Important: openssh security update 2026-10-02T20:52:27.497180+00:00

Affected: AlmaLinux:10: openssh, AlmaLinux:10: openssh-askpass, AlmaLinux:10: openssh-clients, AlmaLinux:10: openssh-keycat, AlmaLinux:10: openssh-keysign, AlmaLinux:10: openssh-server

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283) * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-73283 BELL-CVE-2026-73283 2026-10-02T20:52:27.497251+00:00

Affected: Alpaquita:25: openssh, Alpaquita:stream: openssh, BellSoft Hardened Containers:25: openssh, BellSoft Hardened Containers:stream: openssh

 https://cve.radiocsirt.org/vuln/euvd-2026-351276 EUVD-2026-351276 2026-10-02T20:52:27.497277+00:00 EUVD-2026-351276 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73283 fkie_cve-2026-73283 2026-10-02T20:52:27.497290+00:00

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

 https://cve.radiocsirt.org/vuln/ghsa-97p6-qxmv-h7jm GHSA-97p6-qxmv-h7jm 2026-10-02T20:52:27.497311+00:00

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-73283 msrc_CVE-2026-73283 — In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwa… 2026-10-02T20:52:27.497325+00:00 msrc_CVE-2026-73283 https://cve.radiocsirt.org/vuln/oesa-2026-3746 OESA-2026-3746 — openssh security update 2026-10-02T20:52:27.497341+00:00

Affected: openEuler:24.03-LTS-SP1: openssh

An open source implementation of SSH protocol version 2 Security Fix(es):

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.(CVE-2026-73282)

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.(CVE-2026-73283)

 https://cve.radiocsirt.org/vuln/rhsa-2026:69129 RHSA-2026:69129 — Red Hat Security Advisory: openssh security update 2026-10-02T20:52:27.497362+00:00

openssh: OpenSSH: sftp client allows attacker to control downloaded file location openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options openssh: OpenSSH: ssh-agent allows remote execution of local operations openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client openssh: OpenSSH: Tunnel forwarding restriction bypass

 https://cve.radiocsirt.org/vuln/rhsa-2026:70719 RHSA-2026:70719 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T20:52:27.497393+00:00

openssh: OpenSSH: ssh-agent allows remote execution of local operations openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client openssh: OpenSSH: Tunnel forwarding restriction bypass

 https://cve.radiocsirt.org/vuln/rlsa-2026:69129 RLSA-2026:69129 — Important: openssh security update 2026-10-02T20:52:27.497447+00:00

Affected: Rocky Linux:10: openssh

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)

* openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)

* openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)

* openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)

* openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73283 UBUNTU-CVE-2026-73283 2026-10-02T20:52:27.497474+00:00

Affected: Ubuntu:Pro:14.04:LTS: openssh, Ubuntu:Pro:16.04:LTS: openssh, Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:Pro:18.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:Pro:20.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:20.04:LTS: openssh and 10 more

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2747 WID-SEC-W-2026-2747 — OpenSSH: Mehrere Schwachstellen 2026-10-02T20:52:27.497516+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service und potentiell Codeausführung zu erreichen.