CVE-2026-35388
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.
CVSS
2.5
Low
EPSS
0.1%
p3
KEV
—
Exploit Today
1
0-100
Published: Apr 2, 2026 · Last modified: Jul 24, 2026 · CWE-420
0.1%EPSS · 30 days0.1%
2026-06-302026-07-23
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.