CVE-2026-73282 is a use-after-free vulnerability in OpenSSH's ssh implementation prior to version 10.5. The flaw arises when certain remote-forwarding operations are executed concurrently, causing a use-after-free condition on realloc data. This memory management error could lead to unintended behavior or information disclosure. The vulnerability is classified under CWE-416 (Use After Free). No known exploits in the wild have been reported, and no patch information is currently provided.

The vulnerability could allow an unauthenticated remote attacker to cause a use-after-free condition, potentially leading to limited confidentiality and integrity impacts. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No active exploitation is known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid concurrent remote-forwarding operations that might trigger the vulnerability. Monitor vendor channels for updates and apply patches once released.