Critical OpenSSH Vulnerability Affects Ubuntu 16.04 LTS

A vulnerability in OpenSSH (CVE-2026-35414) was discovered by Vladimir Tokarev, affecting Ubuntu 16.04 LTS. The flaw arises from improper handling of certificates with principal names containing commas, which can lead to unintended access to network services. This issue was addressed in the Ubuntu Security Notice USN-8577-1, which provides a fix corresponding to USN-8222-1. Users are advised to update their systems to mitigate potential security risks. The vulnerability was published on April 2, 2026, with the first public proof of concept released on April 29, 2026. The scope of impact is significant as it could allow unauthorized access to services if exploited. Ubuntu Pro users can benefit from extended security coverage for affected packages.

Key Points: • CVE-2026-35414 affects OpenSSH on Ubuntu 16.04 LTS, allowing unintended access. • The vulnerability was discovered by Vladimir Tokarev and reported in April 2026. • Users are advised to update their systems to the latest package versions to mitigate risks.