https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:33:00 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:69129 <p><strong>Affected:</strong> AlmaLinux:10: openssh, AlmaLinux:10: openssh-askpass, AlmaLinux:10: openssh-clients, AlmaLinux:10: openssh-keycat, AlmaLinux:10: openssh-keysign, AlmaLinux:10: openssh-server</p> <p>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.</p> <p>Security Fix(es):</p> <p>* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283) * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: openssh, AlmaLinux:10: openssh-askpass, AlmaLinux:10: openssh-clients, AlmaLinux:10: openssh-keycat, AlmaLinux:10: openssh-keysign, AlmaLinux:10: openssh-server</p> <p>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.</p> <p>Security Fix(es):</p> <p>* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995) * openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999) * openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283) * openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281) * openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:69129 https://cve.radiocsirt.org/vuln/bell-cve-2026-73281 <p><strong>Affected:</strong> Alpaquita:23: openssh, Alpaquita:25: openssh, Alpaquita:stream: openssh, BellSoft Hardened Containers:23: openssh, BellSoft Hardened Containers:25: openssh, BellSoft Hardened Containers:stream: openssh</p> <p><strong>Affected:</strong> Alpaquita:23: openssh, Alpaquita:25: openssh, Alpaquita:stream: openssh, BellSoft Hardened Containers:23: openssh, BellSoft Hardened Containers:25: openssh, BellSoft Hardened Containers:stream: openssh</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-73281 https://cve.radiocsirt.org/vuln/euvd-2026-351275 EUVD-2026-351275 https://cve.radiocsirt.org/vuln/euvd-2026-351275 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73281 <p>In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.</p> <p>In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-73281 https://cve.radiocsirt.org/vuln/ghsa-j58v-28m8-49f3 <p>In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.</p> <p>In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.</p> https://cve.radiocsirt.org/vuln/ghsa-j58v-28m8-49f3 https://cve.radiocsirt.org/vuln/msrc_cve-2026-73281 msrc_CVE-2026-73281 https://cve.radiocsirt.org/vuln/msrc_cve-2026-73281 https://cve.radiocsirt.org/vuln/oesa-2026-3673 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: openssh</p> <p>An open source implementation of SSH protocol version 2 Security Fix(es):</p> <p>In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the (CVE-2026-73281)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: openssh</p> <p>An open source implementation of SSH protocol version 2 Security Fix(es):</p> <p>In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the (CVE-2026-73281)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3673 https://cve.radiocsirt.org/vuln/rhsa-2026:69129 <p>openssh: OpenSSH: sftp client allows attacker to control downloaded file location openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options openssh: OpenSSH: ssh-agent allows remote execution of local operations openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client openssh: OpenSSH: Tunnel forwarding restriction bypass</p> <p>openssh: OpenSSH: sftp client allows attacker to control downloaded file location openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options openssh: OpenSSH: ssh-agent allows remote execution of local operations openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client openssh: OpenSSH: Tunnel forwarding restriction bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2026:69129 https://cve.radiocsirt.org/vuln/rhsa-2026:70719 <p>openssh: OpenSSH: ssh-agent allows remote execution of local operations openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client openssh: OpenSSH: Tunnel forwarding restriction bypass</p> <p>openssh: OpenSSH: ssh-agent allows remote execution of local operations openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client openssh: OpenSSH: Tunnel forwarding restriction bypass</p> https://cve.radiocsirt.org/vuln/rhsa-2026:70719 https://cve.radiocsirt.org/vuln/rlsa-2026:69129 <p><strong>Affected:</strong> Rocky Linux:10: openssh</p> <p>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.</p> <p>Security Fix(es):</p> <p>* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)</p> <p>* openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)</p> <p>* openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)</p> <p>* openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)</p> <p>* openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: openssh</p> <p>OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.</p> <p>Security Fix(es):</p> <p>* openssh: OpenSSH: sftp client allows attacker to control downloaded file location (CVE-2026-59995)</p> <p>* openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options (CVE-2026-59999)</p> <p>* openssh: OpenSSH: Tunnel forwarding restriction bypass (CVE-2026-73283)</p> <p>* openssh: OpenSSH: ssh-agent allows remote execution of local operations (CVE-2026-73281)</p> <p>* openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client (CVE-2026-73282)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:69129 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73281 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openssh, Ubuntu:Pro:16.04:LTS: openssh, Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:Pro:18.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:Pro:20.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:20.04:LTS: openssh and 10 more</p> <p>In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openssh, Ubuntu:Pro:16.04:LTS: openssh, Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:Pro:18.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:Pro:20.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:20.04:LTS: openssh and 10 more</p> <p>In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73281 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2747 <p>Ein Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service und potentiell Codeausführung zu erreichen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service und potentiell Codeausführung zu erreichen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2747