← Database

CVE-2026-60002

HIGH CVSS: 7.7 Published: 2026-07-08 Modified: 2026-07-09

Description

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

Affected Platforms

Openbsd Openssh

Weakness Type

CWE-416

References