CVE-2026-59999

Опубликовано: 08 июл. 2026

Источник: nvd

CVSS3: 5.9

CVSS3: 7.5

EPSS Низкий

Описание

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

Ссылки

https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2
Release Notes
https://www.openssh.org/releasenotes.html#10.4p1
Release Notes
https://www.openwall.com/lists/oss-security/2026/07/06/5
Mailing List
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

Версия до 10.4 (исключая)

EPSS

Процентиль: 5%

0.00159

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-348

Связанные уязвимости

CVE-2026-59999

CVSS3: 7.5

ubuntu

4 месяца назад

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

CVE-2026-59999

CVSS3: 7.5

redhat

4 месяца назад

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

CVE-2026-59999

CVSS3: 5.9

msrc

4 месяца назад

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

CVE-2026-59999

CVSS3: 7.5

debian

4 месяца назад

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to ...

GHSA-gcm2-x6hm-q4h3

CVSS3: 5.9

github

4 месяца назад

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

EPSS

Процентиль: 5%

0.00159

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-348