← Back

CVE-2026-59999

nvd nist
Published: Jul 8, 2026Modified: Jul 9, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.

Affected (1)

Products: Openbsd: Openssh
Openbsd
1 product
Openssh
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Openssh
Before 10.4

Related CWEs

CWE-348
Use of Less Trusted Source
The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

References (3)

Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Mailing ListRelease Notes

Timeline

No history available yet.