Back Csa.Sg

High Severity Vulnerability in OpenSSH

Csa.Sg • April 30, 2026

Open SecureShell (OpenSSH) has released a security update to address a high severity vulnerability in OpenSSH. The vulnerability has a Common Vulnerability Scoring System (CVSS v3.1) score of 8.1 out of 10. Users and administrators of affected products are advised to update to the latest versions immediately.

OpenSSH is an open-source suite of secure networking utilities based on the SSH protocol. OpenSSH has released a security update to address an authorised keys principals mishandling vulnerability (CVE-2026-35414) affecting OpenSSH before version 10.3.

Successful exploitation of this vulnerability could allow an authenticated attacker to bypass access controls and gain unauthorised root access to the affected system.

This vulnerability affects OpenSSH versions prior to 10.3.

Users and administrators of affected products are advised to update to the latest versions immediately.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical OpenSSH Vulnerability Allows Root Access (CVE-2026-35414) A high severity vulnerability (CVE-2026-35414) in OpenSSH has been identified, allowing attackers to bypass authentication and gain root access to affected servers. This flaw affects all OpenSSH versions prior to 10.3 and has been present for over 15 years. Exploitation requires a valid certificate from a trusted Certificate Authority, and successful attacks may not leave traces in logs, complicating detection efforts. Organizations are urged to update to version 10.3 or later immediately to mitigate risks. The vulnerability was publicly disclosed on April 2, 2026, with proof of concept released on April 29, 2026. No active exploitation has been reported yet, but the potential for significant damage exists. Security experts recommend enhancing monitoring and detection capabilities to identify any suspicious activities related to this vulnerability. 5 sources 72

Extracted Entities

High Severity Vulnerability in OpenSSH

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)