Skip to content
SUSE and openSUSE Address SSH Vulnerabilities in OpenSSH Updates

SUSE and openSUSE Address SSH Vulnerabilities in OpenSSH Updates

First seen 22 Oct 2026, 01:09 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 01:38 UTC
  • •Three vulnerabilities in OpenSSH could lead to security policy bypasses and code execution.
  • •Affected systems include SUSE Linux Enterprise and openSUSE distributions.
  • •Patches are available and should be applied immediately to mitigate risks.

SUSE and openSUSE have released updates for OpenSSH to address multiple vulnerabilities, including CVE-2026-73281, CVE-2026-73282, and CVE-2026-73283. These vulnerabilities could allow attackers to bypass destination restrictions, exploit use-after-free conditions, and circumvent administrative security policies. The flaws affect various versions of OpenSSH across SUSE Linux Enterprise and openSUSE distributions. Users are advised to apply the updates promptly to mitigate potential risks. The vulnerabilities were disclosed on August 11, 2026, and have been assigned CVSS scores indicating low to medium severity. The updates are available through standard installation methods such as YaST and zypper. Administrators should ensure their systems are patched to prevent exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-11
CVE-2026-73281 published
Vulnerability allows destination restriction bypasses on locked SSH agents.
Linuxsecurity
2026-08-11
CVE-2026-73282 published
Unsynchronized remote forwarding updates can cause use-after-free errors.
Linuxsecurity
2026-08-11
CVE-2026-73283 published
Unenforced restriction keywords on tunnel forwarding can bypass security policies.
Linuxsecurity
2026-10-21
Patches released for OpenSSH
SUSE and openSUSE released updates to fix the identified vulnerabilities.
Linuxsecurity

More articles in this cluster (4)

Following this threat?

Track OpenSUSE and CVE-2026-73281 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3

Common questions

Which versions are affected?
The vulnerabilities affect various versions of OpenSSH in SUSE and openSUSE distributions.
Is there active exploitation of these vulnerabilities?
No confirmed exploitation has been reported; the vulnerabilities are disclosed and patched.
What should I do to protect my systems?
Apply the latest patches for OpenSSH using YaST or zypper as soon as possible.