OpenBSD OpenSSH
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
0
unpatched
by severity
1critical5high5medium2low
updated 2026-10-28
01
vulnerabilities (19)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-61984US | — | Exploit |
| CVE-2026-35414US | high8.1 | Exploit |
| CVE-2026-60000US | high7.5 | — |
| CVE-2026-35385US | high8.1 | — |
| CVE-2026-35386US | high8.1 | — |
| CVE-2026-60002US | critical9.4 | — |
| CVE-2026-60001US | — | — |
| CVE-2026-59996US | medium5.4 | — |
| CVE-2026-59995US | medium5.4 | — |
| CVE-2026-35387US | medium6.5 | — |
| CVE-2025-32728US | low3.8 | — |
| CVE-2026-59998US | medium6.5 | — |
| CVE-2026-59997US | medium5.4 | — |
| CVE-2026-73282US | — | — |
| CVE-2026-59999US | high7.5 | — |
| CVE-2026-73281US | — | — |
| CVE-2026-73283US | — | — |
| CVE-2026-35388US | low2.5 | — |
| CVE-2025-61985US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-670Always-Incorrect Control Flow Implementation3 CVEs
- CWE-23Relative Path Traversal2 CVEs
- CWE-416Use After Free2 CVEs
- CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
- CWE-1284Improper Validation of Specified Quantity in Input1 CVEs
- CWE-158Improper Neutralization of Null Byte or NUL Character1 CVEs
- CWE-159Improper Handling of Invalid Use of Special Elements1 CVEs
- CWE-281Improper Preservation of Permissions1 CVEs
03
sources (1)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)19 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan