Known vulnerabilities in openssh (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:openssh_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 29
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssh (Ubuntu package) openssh (Ubuntu package) is affected by 29 known vulnerabilities: 8 medium, 21 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137705 - Configuration
CVE-2026-59998
CWE-16 Medium
No
No
1:8.9p1-3ubuntu0.16, 1:9.6p1-3ubuntu13.18, 1:10.2p1-2ubuntu3.4 15.07.2026 SB2026071535
SB20260715100
#VU137698 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59995
CWE-22 Low
No
No
1:8.9p1-3ubuntu0.16, 1:9.6p1-3ubuntu13.18, 1:10.2p1-2ubuntu3.4 15.07.2026 SB2026071535
SB20260715100
SB20260728131
#VU137699 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59996
CWE-22 Medium
No
No
1:8.9p1-3ubuntu0.16, 1:9.6p1-3ubuntu13.18, 1:10.2p1-2ubuntu3.4 15.07.2026 SB2026071535
SB20260715100
SB2026071797
and 2 more
#VU137700 - Argument Injection or Modification
CVE-2026-59997
CWE-88 Low
No
No
1:8.9p1-3ubuntu0.16, 1:9.6p1-3ubuntu13.18, 1:10.2p1-2ubuntu3.4 15.07.2026 SB2026071535
SB20260715100
#VU137701 - Improper Access Control
CVE-2026-59999
CWE-284 Low
No
No
1:8.9p1-3ubuntu0.16, 1:9.6p1-3ubuntu13.18, 1:10.2p1-2ubuntu3.4 15.07.2026 SB2026071535
SB20260715100
SB20260728131
#VU137702 - Resource exhaustion
CVE-2026-60000
CWE-400 Medium
No
No
1:8.9p1-3ubuntu0.16, 1:9.6p1-3ubuntu13.18, 1:10.2p1-2ubuntu3.4 15.07.2026 SB2026071535
SB20260715100
SB20260728131
#VU137703 - Protection Mechanism Failure
CVE-2026-60001
CWE-693 Medium
No
No
1:8.9p1-3ubuntu0.16, 1:9.6p1-3ubuntu13.18, 1:10.2p1-2ubuntu3.4 15.07.2026 SB2026071535
SB20260715100
SB20260728131
#VU137704 - Use After Free
CVE-2026-60002
CWE-416 Low
No
No
1:8.9p1-3ubuntu0.16, 1:9.6p1-3ubuntu13.18, 1:10.2p1-2ubuntu3.4 15.07.2026 SB2026071535
SB20260715100
SB2026071797
and 1 more
#VU128473 - Improper input validation
CVE-2026-35386
CWE-20 Low
No
No
1:8.9p1-3ubuntu0.15, 1:9.6p1-3ubuntu13.16, 1:10.0p1-5ubuntu5.4, 1:10.2p1-2ubuntu3.2 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 13 more
#VU128474 - Improper Access Control
CVE-2026-35414
CWE-284 Low
No
No
1:7.2p2-4ubuntu2.10+esm9, 1:8.9p1-3ubuntu0.15, 1:9.6p1-3ubuntu13.16, 1:10.0p1-5ubuntu5.4, 1:10.2p1-2ubuntu3.2 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 22 more
#VU128475 - Improper Privilege Management
CVE-2026-35385
CWE-269 Low
No
No
1:7.2p2-4ubuntu2.10+esm8, 1:8.9p1-3ubuntu0.15, 1:9.6p1-3ubuntu13.16, 1:10.0p1-5ubuntu5.4, 1:10.2p1-2ubuntu3.2 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 28 more
#VU128476 - Improper Access Control
CVE-2026-35387
CWE-284 Low
No
No
1:8.9p1-3ubuntu0.15, 1:9.6p1-3ubuntu13.16, 1:10.0p1-5ubuntu5.4, 1:10.2p1-2ubuntu3.2 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 14 more
#VU128477 - Improper Authorization
CVE-2026-35388
CWE-285 Low
No
No
1:8.9p1-3ubuntu0.15, 1:9.6p1-3ubuntu13.16, 1:10.0p1-5ubuntu5.4, 1:10.2p1-2ubuntu3.2 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 17 more
#VU124014 - Resource Management Errors
CVE-2026-3497
CWE-399 Low
No
No
1:8.2p1-4ubuntu0.13+esm1, 1:8.9p1-3ubuntu0.14, 1:9.6p1-3ubuntu13.15, 1:10.0p1-5ubuntu5.1 13.03.2026 SB2026031837
SB2026031838
SB2026031839
and 18 more
#VU116883 - Improper Neutralization of Null Byte or NUL Character
CVE-2025-61985
CWE-158 Low
No
No
1:8.2p1-4ubuntu0.13+esm1, 1:8.9p1-3ubuntu0.14, 1:9.6p1-3ubuntu13.15, 1:10.0p1-5ubuntu5.1 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 25 more
#VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-61984
CWE-78 Low
No
No
1:8.2p1-4ubuntu0.13+esm1, 1:8.9p1-3ubuntu0.14, 1:9.6p1-3ubuntu13.15, 1:10.0p1-5ubuntu5.1 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 27 more
#VU16990 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6109
CWE-451 Low
No
No
1:6.6p1-2ubuntu2.12, 1:7.2p2-4ubuntu2.7, 1:7.6p1-4ubuntu0.2, 1:7.7p1-4ubuntu0.2 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 13 more
#VU16988 - Improper input validation
CVE-2019-6111
CWE-20 Low
Available
No
1:6.6p1-2ubuntu2.12, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.7, 1:7.2p2-4ubuntu2.8, 1:7.6p1-4ubuntu0.2, 1:7.6p1-4ubuntu0.3, 1:7.7p1-4ubuntu0.2, 1:7.7p1-4ubuntu0.3 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 17 more
#VU16946 - Improper Access Control
CVE-2018-20685
CWE-284 Low
No
No
1:6.6p1-2ubuntu2.12, 1:7.2p2-4ubuntu2.7, 1:7.6p1-4ubuntu0.2, 1:7.7p1-4ubuntu0.2 10.01.2019 SB2019011505
SB2019012805
SB2019012904
and 14 more
#VU14440 - Error Handling
CVE-2018-15473
CWE-388 Medium
Available
No
1:6.6p1-2ubuntu2.11, 1:7.2p2-4ubuntu2.6, 1:7.6p1-4ubuntu0.1 17.08.2018 SB2018081603
SB2018082309
SB2018090702
and 19 more


Showing elements 1 - 20 out of 29