CVE-2026-73282

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 60/100

Published: 2026-08-11 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Network No Auth No Interaction

AV: Network

AC: High

PR: None

UI: None

S: Unchanged

C: Low

I: Low

A: None

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

CWE-416

Vendor	Product	Version
openbsd	openssh	< 10.5

https://www.openssh.org/releasenotes.html#10.5

Product Release Notes

60 / 100

✓ Network accessible
✓ No authentication
✓ No user interaction

4.8 / 10.0 v3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

0.16%

Raw Score 0.001630

Percentile 5.4%

Date 2026-10-29

2026-10-29

0.00163

2026-10-28

0.00163

nvd ref →