Known vulnerabilities in openssh8.4-server

Known vulnerabilities in openssh8.4-server

Vendor: SUSE

Software: openssh8.4-server

Software CPE: cpe:2.3:o:suse:openssh8.4-server:*:*:*:*:*:suse_linux:*:*

Website: https://www.suse.com/

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU128474 - Improper Access Control CVE-2026-35414	CWE-284	Low	No	No	8.4p1-8.24.1	29.04.2026	SB2026042988 SB2026042990 SB2026042992 and 23 more
#VU128475 - Improper Privilege Management CVE-2026-35385	CWE-269	Low	No	No	8.4p1-8.24.1	29.04.2026	SB2026042988 SB2026042990 SB2026042992 and 29 more
#VU128477 - Improper Authorization CVE-2026-35388	CWE-285	Low	No	No	8.4p1-8.24.1	29.04.2026	SB2026042988 SB2026042990 SB2026042992 and 18 more
#VU124014 - Resource Management Errors CVE-2026-3497	CWE-399	Low	No	No	8.4p1-8.24.1	13.03.2026	SB2026031837 SB2026031838 SB2026031839 and 19 more
#VU116883 - Improper Neutralization of Null Byte or NUL Character CVE-2025-61985	CWE-158	Low	No	No	8.4p1-8.19.1	10.10.2025	SB2025101008 SB2025103199 SB20251031100 and 25 more
#VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-61984	CWE-78	Low	No	No	8.4p1-8.19.1	10.10.2025	SB2025101008 SB2025103199 SB20251031100 and 27 more
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2025-26465	CWE-300	Medium	No	No	8.4p1-8.16.1	18.02.2025	SB2025021815 SB2025021830 SB2025021833 and 49 more