Skip to content
THREATWIRE

CVE Tracker · Vendor

OpenBSD CVEs

5 CVEs in the tracker, 1 in the CISA KEV catalogue.

All vendors · RSS feed for OpenBSD · Tracker data last updated 18 Oct 2026.

Showing 5 of 5

  1. CVE-2026-106583CVSS 7.8 highEPSS 0.15%2026-10-07

    openssh. In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

  2. CVE-2026-106555CVSS 7.5 highEPSS 0.14%2026-10-06

    openssh. In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across…

  3. CVE-2026-106553CVSS 7.5 highEPSS 0.14%2026-10-06

    openssh. In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication a…

  4. CVE-2020-7247CVSS 9.8 criticalEPSS 99.0%KEV2020-01-29

    OpenSMTPD. OpenSMTPD Remote Code Execution Vulnerability

  5. CVE-2018-15473CVSS 5.3 mediumEPSS 98.6%2018-08-17

    openssh. OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid a…