Vulnetix
Try Vulnetix Request Demo
CVE-2026-35387 PUBLISHED CVSS 3.1 LOW

Reported by mitre · Published April 2, 2026

OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.

Risk Scores

CVSS v3.1
3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
OpenBSDOpenSSH0
OpenBSDOpenSSH0
openbsdopenssh0

Timeline

References

Open in Interactive Console →