CVE-2026-35388NVD

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Severity Level

LOW(2.5)

Published Date

Apr 2, 2026

Last Modified

Apr 27, 2026

Exploitation Status

????

EPSS Score (30-Day)

0.02%Probability

Root Weakness (CWE)

Refer to the official MITRE database for detailed architectural specifications regarding this weakness.

CVSS v3.1 Base Metrics

Attack VectorLocal

Attack ComplexityHigh

Privileges RequiredNone

User InteractionRequired

ScopeUnchanged

ConfidentialityNone

IntegrityLow

AvailabilityNone

CVE Watchtower