# OpenBSD OpenSSH vulnerabilities Source: https://junglewise.ai/threats/technologies/openssh Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/openssh.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 28 vulnerabilities in OpenBSD OpenSSH: 0 in the last 7 days and 1 in the last 90 days, 2 of them critical and 1 exploited in the wild. The most recent, CVE-2026-123158, was published on 5 November 2026. 1 vulnerability in the last four weeks, up from none in the four before. 1 critical against 0, 1 exploited in the wild against 0. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 1 - All time: 28 (2 critical, 1 exploited in the wild) ## About OpenBSD OpenSSH OpenSSH is a suite of secure networking utilities for remote login and command execution. ## Latest OpenBSD OpenSSH vulnerabilities - [CVE-2026-123158: OpenSSH password authentication bypass on musl libc without PAM](https://junglewise.ai/threats/cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used) (critical, exploited in the wild, CVSS 8.1, published 5 Nov 2026) - [CVE-2026-73283: In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel…](https://junglewise.ai/threats/cve-2026-73283-in-sshd-in-openssh-before-10-5-the-restrict-keyword-in-authorized) (low, CVSS 2.5, published 11 Aug 2026) - [CVE-2026-73282: In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding…](https://junglewise.ai/threats/cve-2026-73282-in-ssh-in-openssh-before-10-5-a-use-after-free-for-realloc-data) (medium, CVSS 4.8, published 11 Aug 2026) - [CVE-2026-73281: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally…](https://junglewise.ai/threats/cve-2026-73281-in-ssh-agent-in-openssh-before-10-5-some-operations-can-occur) (low, CVSS 3.5, published 11 Aug 2026) - [CVE-2026-60002: OpenSSH use-after-free in ssh client during key re-exchange](https://junglewise.ai/threats/cve-2026-60002-openssh-use-after-free-in-ssh-client-during-key-re-exchange) (high, CVSS 7.7, published 8 Jul 2026) - [CVE-2026-60001: OpenSSH sshd failure to enforce minimum authentication delay](https://junglewise.ai/threats/cve-2026-60001-openssh-sshd-failure-to-enforce-minimum-authentication-delay) (medium, CVSS 6.5, published 8 Jul 2026) - [CVE-2026-60000: OpenBSD OpenSSH denial of service in GSSAPIAuthentication](https://junglewise.ai/threats/cve-2026-60000-openbsd-openssh-denial-of-service-in-gssapiauthentication) (low, CVSS 3.7, published 8 Jul 2026) - [CVE-2026-59999: OpenSSH sshd configuration bypass in DisableForwarding directive](https://junglewise.ai/threats/cve-2026-59999-openssh-sshd-configuration-bypass-in-disableforwarding-directive) (medium, CVSS 5.9, published 8 Jul 2026) - [CVE-2026-59998: OpenSSH sshd GSSAPIStrictAcceptorCheck bypass in Active Directory](https://junglewise.ai/threats/cve-2026-59998-openssh-sshd-gssapistrictacceptorcheck-bypass-in-active-directory) (medium, CVSS 4.8, published 8 Jul 2026) - [CVE-2026-59997: OpenSSH internal-sftp argument truncation in sshd](https://junglewise.ai/threats/cve-2026-59997-openssh-internal-sftp-argument-truncation-in-sshd) (medium, CVSS 4.2, published 8 Jul 2026) - [CVE-2026-59996: OpenBSD OpenSSH path traversal in scp remote-to-remote copy](https://junglewise.ai/threats/cve-2026-59996-openbsd-openssh-path-traversal-in-scp-remote-to-remote-copy) (medium, CVSS 4.2, published 8 Jul 2026) - [CVE-2026-59995: OpenBSD OpenSSH path traversal in sftp client](https://junglewise.ai/threats/cve-2026-59995-openbsd-openssh-path-traversal-in-sftp-client) (medium, CVSS 4.2, published 8 Jul 2026) - [CVE-2026-55655: OpenSSH X11 forwarding connection hijack via abstract UNIX socket](https://junglewise.ai/threats/cve-2026-55655-openssh-x11-forwarding-connection-hijack-via-abstract-unix-socket) (medium, CVSS 5, published 23 Jun 2026) - [CVE-2026-55653: OpenSSH double free in DH-GEX client during FIPS validation](https://junglewise.ai/threats/cve-2026-55653-openssh-double-free-in-dh-gex-client-during-fips-validation) (medium, CVSS 4.3, published 23 Jun 2026) - [CVE-2026-35414: OpenBSD OpenSSH incorrect principal matching in sshd via authorized_keys](https://junglewise.ai/threats/cve-2026-35414-openbsd-openssh-incorrect-principal-matching-in-sshd-via) (medium, CVSS 4.2, published 2 Apr 2026) - [CVE-2026-35388: OpenSSH connection multiplexing confirmation bypass in proxy mode](https://junglewise.ai/threats/cve-2026-35388-openssh-connection-multiplexing-confirmation-bypass-in-proxy-mode) (low, CVSS 2.5, published 2 Apr 2026) - [CVE-2026-35387: OpenSSH unintended ECDSA algorithm acceptance in sshd config](https://junglewise.ai/threats/cve-2026-35387-openssh-unintended-ecdsa-algorithm-acceptance-in-sshd-config) (low, CVSS 3.1, published 2 Apr 2026) - [CVE-2026-35386: OpenSSH command injection via shell metacharacters in username](https://junglewise.ai/threats/cve-2026-35386-openssh-command-injection-via-shell-metacharacters-in-username) (low, CVSS 3.6, published 2 Apr 2026) - [CVE-2026-35385: OpenSSH scp improper permission preservation in legacy mode](https://junglewise.ai/threats/cve-2026-35385-openssh-scp-improper-permission-preservation-in-legacy-mode) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-3497: OpenSSH GSSAPI uninitialized variable use in Linux distributions](https://junglewise.ai/threats/cve-2026-3497-openssh-gssapi-uninitialized-variable-use-in-linux-distributions) (high, CVSS 7.5, published 12 Mar 2026) - [CVE-2025-61985: OpenSSH code execution via null byte injection in ssh URIs](https://junglewise.ai/threats/cve-2025-61985-openssh-code-execution-via-null-byte-injection-in-ssh-uris) (low, CVSS 3.6, published 6 Oct 2025) - [CVE-2025-61984: OpenSSH code execution via control characters in ProxyCommand usernames](https://junglewise.ai/threats/cve-2025-61984-openssh-code-execution-via-control-characters-in-proxycommand) (low, CVSS 3.6, published 6 Oct 2025) - [CVE-2025-26465: OpenBSD OpenSSH MitM via VerifyHostKeyDNS error mishandling](https://junglewise.ai/threats/cve-2025-26465-openbsd-openssh-mitm-via-verifyhostkeydns-error-mishandling) (medium, CVSS 6.8, published 18 Feb 2025) - [CVE-2024-6387: OpenSSH remote code execution in sshd signal handling](https://junglewise.ai/threats/cve-2024-6387-openssh-remote-code-execution-in-sshd-signal-handling) (high, CVSS 8.1, published 1 Jul 2024) - [CVE-2023-51385: OpenSSH OS command injection via shell metacharacters in hostnames](https://junglewise.ai/threats/cve-2023-51385-openssh-os-command-injection-via-shell-metacharacters-in) (medium, CVSS 6.5, published 18 Dec 2023) ## Most severe OpenBSD OpenSSH vulnerabilities - [CVE-2026-123158: OpenSSH password authentication bypass on musl libc without PAM](https://junglewise.ai/threats/cve-2026-123158-sshd-in-openssh-before-10-6p2-on-linux-when-musl-libc-is-used) (critical, exploited in the wild, CVSS 8.1, published 5 Nov 2026) - [CVE-2023-28531: OpenSSH ssh-add destination constraint bypass for smartcard keys](https://junglewise.ai/threats/cve-2023-28531-openssh-ssh-add-destination-constraint-bypass-for-smartcard-keys) (critical, CVSS 9.8, published 17 Mar 2023) - [CVE-2024-6387: OpenSSH remote code execution in sshd signal handling](https://junglewise.ai/threats/cve-2024-6387-openssh-remote-code-execution-in-sshd-signal-handling) (high, CVSS 8.1, published 1 Jul 2024) - [CVE-2026-60002: OpenSSH use-after-free in ssh client during key re-exchange](https://junglewise.ai/threats/cve-2026-60002-openssh-use-after-free-in-ssh-client-during-key-re-exchange) (high, CVSS 7.7, published 8 Jul 2026) - [CVE-2026-35385: OpenSSH scp improper permission preservation in legacy mode](https://junglewise.ai/threats/cve-2026-35385-openssh-scp-improper-permission-preservation-in-legacy-mode) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-3497: OpenSSH GSSAPI uninitialized variable use in Linux distributions](https://junglewise.ai/threats/cve-2026-3497-openssh-gssapi-uninitialized-variable-use-in-linux-distributions) (high, CVSS 7.5, published 12 Mar 2026) - [CVE-2021-41617: OpenSSH privilege escalation in AuthorizedKeysCommand helper programs](https://junglewise.ai/threats/cve-2021-41617-openssh-privilege-escalation-in-authorizedkeyscommand-helper) (high, CVSS 7, published 26 Sep 2021) - [CVE-2025-26465: OpenBSD OpenSSH MitM via VerifyHostKeyDNS error mishandling](https://junglewise.ai/threats/cve-2025-26465-openbsd-openssh-mitm-via-verifyhostkeydns-error-mishandling) (medium, CVSS 6.8, published 18 Feb 2025) - [CVE-2026-60001: OpenSSH sshd failure to enforce minimum authentication delay](https://junglewise.ai/threats/cve-2026-60001-openssh-sshd-failure-to-enforce-minimum-authentication-delay) (medium, CVSS 6.5, published 8 Jul 2026) - [CVE-2023-51385: OpenSSH OS command injection via shell metacharacters in hostnames](https://junglewise.ai/threats/cve-2023-51385-openssh-os-command-injection-via-shell-metacharacters-in) (medium, CVSS 6.5, published 18 Dec 2023) ## Vulnerabilities per week 1 vulnerability in the last four weeks, up from none in the four before. 1 critical against 0, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 1 | 1 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other OpenBSD technologies - [Openbsd](https://junglewise.ai/threats/technologies/openbsd): 13 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "OpenBSD OpenSSH vulnerabilities", https://junglewise.ai/threats/technologies/openssh, 13 November 2026.