CyberRota Analysis
AI-GeneratedOpenSSH versions prior to 10.5 are susceptible to a use-after-free vulnerability in the SSH protocol, triggered by concurrent remote-forwarding operations. This flaw may allow an attacker to exploit memory management issues, potentially leading to arbitrary code execution or denial of service. Organizations using affected versions of OpenSSH should prioritize patching to mitigate the risk associated with this vulnerability.
CVE
CVE-2026-73282
Severity
MEDIUM
CVSS
4.8
EPSS
0.16%
Original NVD Description
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.