PULSE
LIVE15signals / 24h
FEED
ransompayoutsking reclama a T****r · US · Technologyransomsecurotrop reclama a Advantage Sintered Metals · US · Manufacturingransomqilin reclama a GOP · GB · Otherransomnova reclama a Center Of Information Technologies In Finance Public Institution · Financial Servicesransomunsafe reclama a Jiva Health · IN · Healthcareransomsafepay reclama a upland.k12.ca.us · US · Educationransomsafepay reclama a gvsurgicalarts.com · US · Healthcareransomm3rx reclama a ausproof.com.au · AU · Professional Servicesransombooba project reclama a Zynex · CH · Healthcareransomakira reclama a Emerge2 Digital · Technologyransomqilin reclama a Ejército Argentino · AR · Government & Defenseransomqilin reclama a Kean University · US · Educationransomqilin reclama a Highline Community College · US · Educationransomdragonforce reclama a ID engineering · ID · Manufacturingransompayoutsking reclama a T****r · US · Technologyransomsecurotrop reclama a Advantage Sintered Metals · US · Manufacturingransomqilin reclama a GOP · GB · Otherransomnova reclama a Center Of Information Technologies In Finance Public Institution · Financial Servicesransomunsafe reclama a Jiva Health · IN · Healthcareransomsafepay reclama a upland.k12.ca.us · US · Educationransomsafepay reclama a gvsurgicalarts.com · US · Healthcareransomm3rx reclama a ausproof.com.au · AU · Professional Servicesransombooba project reclama a Zynex · CH · Healthcareransomakira reclama a Emerge2 Digital · Technologyransomqilin reclama a Ejército Argentino · AR · Government & Defenseransomqilin reclama a Kean University · US · Educationransomqilin reclama a Highline Community College · US · Educationransomdragonforce reclama a ID engineering · ID · Manufacturing
← All CVEs
CVE WatchJul 24, 2026

CVE-2026-35388

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

CVSS

2.5

Low

EPSS

0.1%

p3

KEV

Exploit Today

1

0-100

Published: Apr 2, 2026 · Last modified: Jul 24, 2026 · CWE-420

EPSS · 30d
0.1%EPSS · 30 days0.1%
2026-06-302026-07-23
Technical description

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-402178.8 HIG
93.0%
28LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.10d