AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-73282

MEDIUM · CVSS 4.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-11 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

OpenSSH versions prior to 10.5 are susceptible to a use-after-free vulnerability in the SSH protocol, triggered by concurrent remote-forwarding operations. This flaw may allow an attacker to exploit memory management issues, potentially leading to arbitrary code execution or denial of service. Organizations using affected versions of OpenSSH should prioritize patching to mitigate the risk associated with this vulnerability.

CVE
CVE-2026-73282
Severity
MEDIUM
CVSS
4.8
EPSS
0.16%

Original NVD Description

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.