Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-02 | 1 | Disclosure1 |
| 2026-04-03 | 2 | General1Patch1 |
| 2026-04-20 | 1 | Patch1 |
| 2026-05-04 | 1 | Patch1 |
| 2026-05-18 | 1 | Disclosure1 |
OpenSSH 10.3p1 fixed two issues we reported: CVE-2026-35385 in scp and CVE-2026-35387 in ECDSA policy handling. Different bugs, same lesson: mature infrastructure still carries security debt that only shows up when someone re-reads the assumptions.
Post summary
The text announces that OpenSSH 10.3p1 incorporates fixes for CVE-2026-35385 (scp) and CVE-2026-35387 (ECDSA policy handling), highlighting ongoing security maintenance.
The severity is increased for this new vulnerability affecting OpenSSH (CVE-2026-35385) https://vuldb.com/vuln/354929
Post summary
The note announces a new OpenSSH vulnerability (CVE-2026-35385) with an increased severity, referencing a vuldb.com entry for details.
OpenSSH vulnerabilities CVE-2026-35385 & CVE-2026-35414 affect #openSUSE. Read more -> https://tinyurl.com/4vxdppw6 #Security https://t.co/RLvNLhUujm
Post summary
The tweet announces that two new OpenSSH vulnerabilities (CVE‑2026‑35385, CVE‑2026‑35414) affect openSUSE and directs readers to a URL for more information.
SIOSセキュリティブログを更新しました。 OpenSSHの脆弱性(High: CVE-2026-35385, Medium: CVE-2026-35414, Low: CVE-2026-35386, CVE-2026-35387, CVE-2026-35388)と10.3/10.3p1の公開 #sios_tech #security #vulnerability #セキュリティ #脆弱性 #linux #openssh #ssh https://security.sios.jp/vulnerability/openssh-vulnerability-20260403/
Post summary
The blog announces several new OpenSSH CVEs and the publication of version 10.3/10.3p1, which addresses the identified vulnerabilities.
OpenSSH(scp) 7.5 Imortant RHEL8, 9用のアップデート来ましたね // CVE-2026-35385 - Red Hat Customer Portal https://access.redhat.com/security/cve/cve-2026-35385
Post summary
Red Hat has released an update for RHEL 8 and 9 to address CVE-2026-35385, which impacts OpenSSH(scp) 7.5.
IT関連サイト記事が更新されました！記事はこちらから⇒ OpenSSHの脆弱性(High: CVE-2026-35385, Medium: CVE-2026-35414, Low: CVE-2026-35386, CVE-2026-35387, CVE-2026-35388)と、OpenSSH 10.3/10.3p1の公開 https://security.sios.jp/vulnerability/openssh-vulnerability-20260403/
Post summary
The article announces several OpenSSH CVEs with severity ratings, but does not provide exploitation details, patch info, or technical specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openbsd | openssh | - | - | - |