Known vulnerabilities in openssh-helpers
Vendor:
SUSE
Software:
openssh-helpers
Software CPE:
cpe:2.3:o:suse:openssh-helpers:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
24
Public exploits:
5
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
9.6p1-150600.6.49.1
6.6p1-36.31.1
7.2p2-81.40.1
8.4p1-150300.3.65.1
9.6p1-150600.6.42.1
7.2p2-81.37.1
8.4p1-150300.3.60.1
9.6p1-150600.6.37.1
8.4p1-150300.3.57.1
7.2p2-81.34.1
9.6p1-150600.6.34.1
9.6p1-150600.6.26.1
7.2p2-81.29.4
8.4p1-150300.3.49.1
9.6p1-150600.6.18.4
7.2p2-81.26.1
8.4p1-150300.3.42.1
9.6p1-150600.6.15.2
9.6p1-150600.6.9.1
9.6p1-150600.6.6.1
9.6p1-150600.6.3.1
7.2p2-81.17.1
8.1p1-150200.5.46.1
7.2p2-81.12.1
8.4p1-150300.3.30.1
8.4p1-150300.3.27.1
7.2p2-81.8.1
8.1p1-150200.5.43.1
7.9p1-150100.6.34.1
8.4p1-150300.3.22.1
7.2p2-74.63.1
8.1p1-150200.5.37.1
7.9p1-150100.6.31.1
7.2p2-81.4.2
8.4p1-3.9.1
7.2p2-74.60.1
8.4p1-3.6.1
7.9p1-6.28.1
7.6p1-9.44.1
7.2p2-78.13.1
6.6p1-36.26.1
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137705 - Configuration CVE-2026-59998 |
CWE-16 | Medium | 9.6p1-150600.6.49.1 | 15.07.2026 |
SB2026071535 SB20260715100 SB2026081365 |
||
| #VU137698 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-59995 |
CWE-22 | Low | 9.6p1-150600.6.49.1 | 15.07.2026 |
SB2026071535 SB20260715100 SB20260728131 and 8 more |
||
| #VU137699 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-59996 |
CWE-22 | Medium | 9.6p1-150600.6.49.1 | 15.07.2026 |
SB2026071535 SB20260715100 SB2026071797 and 7 more |
||
| #VU137700 - Argument Injection or Modification CVE-2026-59997 |
CWE-88 | Low | 9.6p1-150600.6.49.1 | 15.07.2026 |
SB2026071535 SB20260715100 SB2026081365 and 6 more |
||
| #VU137701 - Improper Access Control CVE-2026-59999 |
CWE-284 | Low | 9.6p1-150600.6.49.1 | 15.07.2026 |
SB2026071535 SB20260715100 SB20260728131 and 6 more |
||
| #VU137702 - Resource exhaustion CVE-2026-60000 |
CWE-400 | Medium | 9.6p1-150600.6.49.1 | 15.07.2026 |
SB2026071535 SB20260715100 SB20260728131 and 6 more |
||
| #VU137703 - Protection Mechanism Failure CVE-2026-60001 |
CWE-693 | Medium | 9.6p1-150600.6.49.1 | 15.07.2026 |
SB2026071535 SB20260715100 SB20260728131 and 6 more |
||
| #VU137704 - Use After Free CVE-2026-60002 |
CWE-416 | Low | 9.6p1-150600.6.49.1 | 15.07.2026 |
SB2026071535 SB20260715100 SB2026071797 and 4 more |
||
| #VU128474 - Improper Access Control CVE-2026-35414 |
CWE-284 | Low | 6.6p1-36.31.1, 7.2p2-81.37.1, 7.2p2-81.40.1, 8.4p1-150300.3.60.1, 8.4p1-150300.3.65.1, 9.6p1-150600.6.37.1, 9.6p1-150600.6.42.1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 24 more |
||
| #VU128475 - Improper Privilege Management CVE-2026-35385 |
CWE-269 | Low | 6.6p1-36.31.1, 7.2p2-81.37.1, 7.2p2-81.40.1, 8.4p1-150300.3.60.1, 8.4p1-150300.3.65.1, 9.6p1-150600.6.37.1, 9.6p1-150600.6.42.1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 30 more |
||
| #VU128477 - Improper Authorization CVE-2026-35388 |
CWE-285 | Low | 8.4p1-150300.3.65.1, 9.6p1-150600.6.42.1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 19 more |
||
| #VU124014 - Resource Management Errors CVE-2026-3497 |
CWE-399 | Low | 7.2p2-81.40.1, 8.4p1-150300.3.65.1, 9.6p1-150600.6.42.1 | 13.03.2026 |
SB2026031837 SB2026031838 SB2026031839 and 19 more |
||
| #VU116883 - Improper Neutralization of Null Byte or NUL Character CVE-2025-61985 |
CWE-158 | Low | 8.4p1-150300.3.57.1, 9.6p1-150600.6.34.1 | 10.10.2025 |
SB2025101008 SB2025103199 SB20251031100 and 25 more |
||
| #VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-61984 |
CWE-78 | Low | 7.2p2-81.34.1, 8.4p1-150300.3.57.1, 9.6p1-150600.6.34.1 | 10.10.2025 |
SB2025101008 SB2025103199 SB20251031100 and 27 more |
||
| #VU107332 - Protection Mechanism Failure CVE-2025-32728 |
CWE-693 | Low | 8.4p1-150300.3.49.1, 9.6p1-150600.6.26.1 | 10.04.2025 |
SB2025041009 SB2025041010 SB2025042478 and 14 more |
||
| #VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2025-26465 |
CWE-300 | Medium | 7.2p2-81.26.1, 8.4p1-150300.3.42.1, 9.6p1-150600.6.15.2 | 18.02.2025 |
SB2025021815 SB2025021830 SB2025021833 and 49 more |
||
| #VU104034 - Improper input validation CVE-2025-26466 |
CWE-20 | Medium | 9.6p1-150600.6.15.2 | 18.02.2025 |
SB2025021815 SB2025021830 SB2025021840 and 25 more |
||
| #VU93514 - Exposure of sensitive information to an unauthorized actor CVE-2024-39894 |
CWE-200 | Low | 9.6p1-150600.6.6.1 | 01.07.2024 |
SB2024070144 SB2024070956 SB2024071076 and 7 more |
||
| #VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-6387 |
CWE-362 | High | 9.6p1-150600.6.3.1 | 01.07.2024 |
SB2024070144 SB2024070145 SB2024070152 and 89 more |
||
| #VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-51385 |
CWE-78 | Medium | 7.2p2-81.12.1, 8.1p1-150200.5.46.1, 8.4p1-150300.3.30.1, 9.6p1-150600.6.6.1 | 26.12.2023 |
SB2023121905 SB2023122710 SB2023122801 and 65 more |
Showing elements 1 - 20 out of 24