OpenBSD vulnerabilities
51 CVEs and advisories name OpenBSD as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-56099OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input
- CVE-2026-55706sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.
- CVE-2026-41285In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (
- CVE-2026-35414OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a
- CVE-2026-35388OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.
- CVE-2026-35387OpenSSH before 10.3 can use unintended ECDSA algorithms.
- CVE-2026-35386In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line.
- CVE-2026-35385In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the
- CVE-2025-61985ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
- CVE-2025-61984ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially…
- CVE-2025-32728In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent
- CVE-2025-30334OpenBSD wg(4) kernel crash
- CVE-2024-11149OpenBSD vmm GDTR limits
- CVE-2024-10933OpenBSD readdir directory traversal
- CVE-2024-11148OpenBSD httpd(8) null dereference
- CVE-2024-10934OpenBSD NFS double-free vulnerability
- CVE-2021-35000OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability
- CVE-2021-34999OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability
- CVE-2023-52558OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash
- CVE-2023-52557OpenBSD 7.3 invalid l2tp message npppd crash
- CVE-2023-52556OpenBSD 7.4 pf state race condition kernel crash