CVE Catalog
CVE-2026-73282
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.
Risk Assessment
The risk includes potential arbitrary code execution or crash of the ssh process, which could compromise remote session security.
Recommendation
Upgrade OpenSSH to version 10.5 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.