This Week
Get Alerts ›
cvehawk_ Get Alerts
Software · OpenSSH

OpenSSH Vulnerabilities

The latest security flaws in OpenSSH, the remote login server on almost every Linux machine, and whether your version is affected.

New flaws, 30 days
9
Critical, 8 weeks
1
On CISA's exploited list
1
Latest exploited
9 Nov 2026

Run ssh -V, or sshd -V, on the server.

OpenSSH Security in Short

OpenSSH has a very good security record, so a serious flaw is rare and widely reported when it happens: regreSSHion in 2024, and SSHole in 2026. Because port 22 faces the internet on most servers, attackers scan for vulnerable versions within hours.

How to Keep OpenSSH Patched

  • Update through your distribution, then restart sshd. Existing sessions stay open.
  • Use SSH keys and turn off password logins (PasswordAuthentication no). That removes a whole class of attacks.
  • Limit who can reach port 22 with a firewall or VPN where you can.

The Past Eight Weeks

Any Score 7+ 8+ 9+

12 flaws scored 7+, newest first.

5 Nov 2026 Security flaw sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password… CVE-2026-123158 8.1 Exploited

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.

Patch now · NVD Record

13 Oct 2026 Memory corruption Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. CVE-2026-97816 9.8

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Patch now · NVD Record

13 Oct 2026 Path traversal Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. CVE-2026-83923 8.8

Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Patch this week · NVD Record

13 Oct 2026 Memory corruption Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a netw… CVE-2026-88157 8.8

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Patch this week · NVD Record

13 Oct 2026 Memory corruption Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. CVE-2026-83769 7.8

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Patch this week · NVD Record

13 Oct 2026 Memory corruption Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. CVE-2026-97811 7.8

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Patch this week · NVD Record

13 Oct 2026 Denial of service Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker t… CVE-2026-70163 7.5

Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.

Patch this week · NVD Record

13 Oct 2026 Memory corruption Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a netw… CVE-2026-83754 7.5

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Patch this week · NVD Record

13 Oct 2026 Memory corruption Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. CVE-2026-83871 7.0

Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

Patch this week · NVD Record

7 Oct 2026 Security flaw In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. CVE-2026-106583 7.8

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

Patch this week · NVD Record

6 Oct 2026 Security flaw In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication a… CVE-2026-106553 7.5

In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.

Patch this week · NVD Record

6 Oct 2026 Security flaw In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across… CVE-2026-106555 7.5

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.

Patch this week · NVD Record

Being Exploited

OpenSSH flaws CISA has added to its list of flaws attackers are using in the past six months, newest first. See all 1 on the KEV page.

Patch now

OpenSSH

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authenticati…

Score 8.1 / 10 · Being exploited · Fixed in 10.6

CVE-2026-123158

Read: SSHole ›

Rather not patch it yourself?

Bobble Solutions patches, backs up and watches Linux servers and WordPress sites.

Talk to Bobble Solutions