CVE-2026-35414 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authori…
Medium CVSS: 4.2

CVE-2026-35414

OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.
Vendor
Openbsd
Product
Openssh
CWE
CWE-670
Yayın Tarihi
2026-04-02 18:16:34
Güncelleme
2026-04-03 19:39:03
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-670 Openssh MEDIUM Openbsd 2026

Referanslar

https://marc.info/?l=openssh-unix-dev&m=177513443901484&w=2 https://www.openssh.org/releasenotes.html#10.3p1 https://www.openwall.com/lists/oss-security/2026/04/02/3