๐Ÿ” CVE Alert

CVE-2026-73283

LOW 2.5
CVSS Score
2.5
EPSS Score
0.0%
EPSS Percentile
0th

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

CWE CWE-670
Vendor openbsd
Product openssh
Ecosystems
Industries
Technology
Published Aug 11, 2026
Last Updated Aug 11, 2026
Stay Ahead of the Next One

Get instant alerts for openbsd openssh

Be the first to know when new low vulnerabilities affecting openbsd openssh are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Affected Versions

OpenBSD / OpenSSH
0 < 10.5

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
openssh.org: https://www.openssh.org/releasenotes.html#10.5