CVE-2026-35388

Low

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

mitre·CWE-420·Published 2026-04-02

CVSS

2.5

EPSS

0.00

KEV

Exploits

cve.orgen

100 chars

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

NVDen

100 chars

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	2.5	1.0	1.4	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
3.1	Primary	cve.org	2.5	—	—	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N