CVE Feed

    Dashboard / CVE / CVE-2026-110929

    CVE-2026-110929

    A flaw was found in OpenSSH. On platforms that cannot pass file descriptors and that need root to allocate a terminal, the post-authentication session process keeps root privilege. An authenticated user can then perform actions as root, including privileged socket connections and binding forwards to low-numbered ports.

    Published:Oct 15, 2026
    Last Modified:Oct 17, 2026
    EPS:N/A
    EPSS Score:
    CVSS Score:8.1

    Affected Products

    Vendor
    Openssh
    Product
    Openssh

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-110928 (CVSS 6.5) — A flaw was found in OpenSSH. The authorized_keys "restrict" keyword was not applied to tunnel forwarding. When…
    CVE-2026-110924 (CVSS 4.8) — CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.…
    CVE-2026-55655 (CVSS 5) — A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 f…
    CVE-2026-55654 (CVSS 3.7) — A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAP…
    CVE-2026-55653 (CVSS 4.3) — A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hell…
    CVE-2024-39894 (CVSS 7.5) — OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for …
    CVE-2023-35812 (CVSS 5.3) — An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, because of an in…

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High