CVE-2026-35387

Name
CVE-2026-35387
Description
OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cve@mitre.org https://marc.info/?l=openssh-unix-dev&m=177513443901484&w=2
cve@mitre.org https://www.openssh.org/releasenotes.html#10.3p1
cve@mitre.org https://www.openwall.com/lists/oss-security/2026/04/02/3

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* openssh >= None < 10.3

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
openssh edge-main 10.2_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.1_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r11 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r10 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r9 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r8 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r7 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r6 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r5 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r4 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r3 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.9_p2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.9_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.8_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.6_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 8.9_p2-r0 None possibly vulnerable
openssh edge-main 8.8_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 8.5_p1-r0 None possibly vulnerable
openssh edge-main 8.4_p1-r0 None possibly vulnerable
openssh edge-main 7.9_p1-r3 None possibly vulnerable
openssh edge-main 7.7_p1-r4 None possibly vulnerable
openssh edge-main 7.5_p1-r8 None possibly vulnerable
openssh edge-main 7.4_p1-r0 None possibly vulnerable
openssh 3.23-main 10.2_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r10 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r9 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r8 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r7 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 9.9_p2-r0 None possibly vulnerable
openssh 3.22-main 9.8_p1-r0 None possibly vulnerable
openssh 3.22-main 9.6_p1-r0 None possibly vulnerable
openssh 3.22-main 8.8_p1-r0 None possibly vulnerable
openssh 3.22-main 8.5_p1-r0 None possibly vulnerable
openssh 3.22-main 8.4_p1-r0 None possibly vulnerable
openssh 3.22-main 7.9_p1-r3 None possibly vulnerable
openssh 3.22-main 7.7_p1-r4 None possibly vulnerable
openssh 3.22-main 7.5_p1-r8 None possibly vulnerable
openssh 3.22-main 7.4_p1-r0 None possibly vulnerable
openssh 3.21-main 9.9_p2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.21-main 9.9_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.21-main 9.8_p1-r0 None possibly vulnerable
openssh 3.21-main 9.6_p1-r0 None possibly vulnerable
openssh 3.21-main 8.8_p1-r0 None possibly vulnerable
openssh 3.21-main 8.5_p1-r0 None possibly vulnerable
openssh 3.21-main 8.4_p1-r0 None possibly vulnerable
openssh 3.21-main 7.9_p1-r3 None possibly vulnerable
openssh 3.21-main 7.7_p1-r4 None possibly vulnerable
openssh 3.21-main 7.5_p1-r8 None possibly vulnerable
openssh 3.21-main 7.4_p1-r0 None possibly vulnerable
openssh 3.20-main 9.7_p1-r5 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.20-main 9.7_p1-r4 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.20-main 9.6_p1-r0 None possibly vulnerable
openssh 3.20-main 8.8_p1-r0 None possibly vulnerable
openssh 3.20-main 8.5_p1-r0 None possibly vulnerable
openssh 3.20-main 8.4_p1-r0 None possibly vulnerable
openssh 3.20-main 7.9_p1-r3 None possibly vulnerable
openssh 3.20-main 7.7_p1-r4 None possibly vulnerable
openssh 3.20-main 7.5_p1-r8 None possibly vulnerable
openssh 3.20-main 7.4_p1-r0 None possibly vulnerable
openssh 3.19-main 9.7_p2-r5 None possibly vulnerable
openssh 3.19-main 9.6_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.19-main 9.6_p1-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.19-main 9.6_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.19-main 8.8_p1-r0 None possibly vulnerable
openssh 3.19-main 8.5_p1-r0 None possibly vulnerable
openssh 3.19-main 8.4_p1-r0 None possibly vulnerable
openssh 3.19-main 7.9_p1-r3 None possibly vulnerable
openssh 3.19-main 7.7_p1-r4 None possibly vulnerable
openssh 3.19-main 7.5_p1-r8 None possibly vulnerable
openssh 3.19-main 7.4_p1-r0 None possibly vulnerable