CVE-2026-35388

Microsoft · Published April 4, 2026

2.5

CVSS v3.1

INFO

Patch availableGet patch

Description

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.. OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Affected Products

cbl2 openssh 8.9p1-9 on CBL Mariner 2.0
azl3 openssh 9.8p1-5 on Azure Linux 3.0
cbl2 openssh 8.9p1-9

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U