CVE-2026-35387
LOW SEVERITYCVSS Score & Metrics
Base Score
3.1 / 10
Vector String
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Vulnerability Description
OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-670
Source
NVD
Vendor
OpenBSD
Product
OpenSSH
Discussion (0)
Add Comment
No comments yet. Be the first!