Vulnerabilidades em OpenBSD
51 resultadosAnálise Vexday
OpenBSD possui 29 vulnerabilidades registradas, com 1 crítica e nenhuma atualmente sob ataque ativo conforme o KEV, indicando risco contido no curto prazo. Contudo, 10 CVEs publicadas nos últimos 90 dias sinalizam pressão recente sobre a superfície de ataque, com predomínio de falhas relacionadas a CWE-1284 (problemas de encapsulamento/acesso a atributos). O perfil sugere vulnerabilidades de exploração moderada, exigindo monitoramento contínuo mas sem urgência crítica.
CVE-2026-106553LOWIn sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.EPSS 0.1%CVE-2026-118371MEDIUMLibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request LineEPSS 0.1%CVE-2024-11149MEDIUMOpenBSD vmm GDTR limitsEPSS 0.1%CVE-2026-35388LOWOpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.EPSS 0.1%CVE-2026-106588LOWIn sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpectEPSS 0.1%CVE-2025-61985LOWssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.EPSS 0.1%CVE-2026-106586LOWIn sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a EPSS 0.1%CVE-2026-118373MEDIUMLibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()EPSS 0.1%CVE-2026-106587LOWIn sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean EPSS 0.1%CVE-2026-106589LOWIn sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileEPSS 0.1%CVE-2026-106584LOWIn ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can bEPSS 0.1%