CVE-2026-73283
EUVD-2026-5689211.08.2026, 20:18
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openbsd | openssh | 𝑥 < 10.5 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| openssh |
| ||||||||||||||||
| openssh-ssh1 |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| openssh |
| ||||
| openssh-askpass |
| ||||
| openssh-cavs |
| ||||
| openssh-clients |
| ||||
| openssh-keycat |
| ||||
| openssh-ldap |
| ||||
| openssh-server |
| ||||
| pam |
|
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| openssh |
| ||
| openssh-clients |
| ||
| openssh-clients-debuginfo |
| ||
| openssh-debuginfo |
| ||
| openssh-debugsource |
| ||
| openssh-keycat |
| ||
| openssh-keycat-debuginfo |
| ||
| openssh-server |
| ||
| openssh-server-debuginfo |
| ||
| openssh-sk-dummy |
| ||
| openssh-sk-dummy-debuginfo |
| ||
| pam_ssh_agent_auth |
| ||
| pam_ssh_agent_auth-debuginfo |
|
Common Weakness Enumeration