OpenBSD vulnerabilities

CVEs per yearBy the year they were published

1. 20249
2. 20254
3. 202638

Newest CVEs

• CVE-2026-123158

  sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to…

  OpenBSD · OpenSSH

  High8.1
• CVE-2026-118374

  LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response

  OpenBSD · LibreSSL

  High8.2
• CVE-2026-118373

  LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()

  OpenBSD · LibreSSL

  Medium6.3
• CVE-2026-118372

  LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path

  OpenBSD · LibreSSL

  Medium6.3
• CVE-2026-118371

  LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line

  OpenBSD · LibreSSL

  Medium6.3
• CVE-2026-106583

  In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

  OpenBSD · OpenSSH

  Low2.5
• CVE-2026-106589

  In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is…

  OpenBSD · OpenSSH

  Low2.9
• CVE-2026-106588

  In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected.

  OpenBSD · OpenSSH

  Low3.1
• CVE-2026-106587

  In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is…

  OpenBSD · OpenSSH

  Low3.6
• CVE-2026-106586

  In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different…

  OpenBSD · OpenSSH

  Low2.5