Search: CVE-2026-35387

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.1	EPSS 0.2%	CVE-2026-35387OpenBSD OpenSSH · Always-Incorrect Control Flow Implementation Low3.1EPSS 0.2%2026-04-02CVE Database V5CVE-2026-35387 OpenSSH versions before 10.3 have a vulnerability where specifying any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms causes all ECDSA algorithms to be accepted. This is due to incorrect control flow implementation. The issue is classified under CWE-670 and has a low CVSS score of 3.1. EPSS 0.2%Vulnerability CWE-670	CVE Database V5	2026-04-02

Page 1 of 1 · 1 duplicate CVE record merged