CVE-2026-73282

Published Aug 11, 2026

Last updated 15 days ago

CVSS medium 4.8
Port (22)

Overview

Description
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.
Source
cve@mitre.org
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
4.8
Impact score
2.5
Exploitability score
2.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Severity
MEDIUM

Weaknesses

cve@mitre.org
CWE-416

Social media

Hype score
Not currently trending

  1. 状況調べますか… OpenSSHの脆弱性(Medium: CVE-2026-73282, Low: CVE-2026-73281, CVE-2026-73283)とOpenSSH 10.5リリース https://t.co/sMAYZg7Dc5

    @wakababest

    12 Aug 2026

    53 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. OpenSSHの脆弱性(Medium: CVE-2026-73282, Low: CVE-2026-73281, CVE-2026-73283)とOpenSSH 10.5リリース #sios_tech #security #vulnerability #セキュリティ #脆弱性 #ssh #openssh https://t.co/xKtgb43ZHc

    @omokazuki

    12 Aug 2026

    107 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability•CVE-2026-18577
  2. N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability•CVE-2026-18556
  3. Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. Prior to 0.23.0, Kopia's HTTP server started with --without-password accepts unauthenticated requests to /api/v1/repo/exists and forwards attacker-supplied SFTP storage configuration to blob.NewStorage, where externalSSH: true and sshArguments containing -oProxyCommand=<cmd> can cause exec.CommandContext("ssh") to invoke the command through OpenSSH. This issue is fixed in version 0.23.0.•CVE-2026-45695
  4. sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.•CVE-2026-60001
  5. A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.•CVE-2026-55654

References

Sources include official advisories and independent security research.