This advisory covers five distinct security vulnerabilities in OpenSSH distributed with Red Hat Enterprise Linux 9.6 EUS. CVE-2026-35385 allows privilege escalation via the scp legacy protocol when file mode preservation is not enforced. CVE-2026-35414 involves a security bypass caused by improper handling of the authorized_keys principals option. CVE-2026-35387 results in information disclosure due to unintended use of cryptographic algorithms. CVE-2026-35388 has a low integrity impact from unconfirmed proxy-mode multiplexing sessions. CVE-2026-35386 enables arbitrary command execution through shell metacharacters in usernames. Red Hat has released updated OpenSSH packages to address these vulnerabilities. The advisory does not provide CVSS scores but rates the overall impact as important. No known exploits in the wild have been reported at this time.

The vulnerabilities collectively allow for privilege escalation, security bypass, information disclosure, integrity issues, and arbitrary command execution on affected systems running OpenSSH. These could potentially allow attackers to gain unauthorized access or execute commands with elevated privileges if exploited. The impact severity is considered high by the reporting source, and Red Hat classifies the update as important for security.

Red Hat has released updated OpenSSH packages that address all identified vulnerabilities. Users of Red Hat Enterprise Linux 9.6 Extended Update Support and related affected versions should apply the provided security update promptly following Red Hat's official guidance at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update. Patch status is confirmed as available and official.