CVE-2026-35414
ADVISORY - nistSummary
OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.
EPSS Score: 0.00016 (0.036)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Always-Incorrect Control Flow Implementation
ADVISORY - redhat
Improper Handling of Inconsistent Special Elements
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-35414
EXPLOITABILITY SCORE
1.6
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
4.2mediumAlpine
CREATED
UPDATED
ADVISORY IDCVE-2026-35414
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Debian
CREATED
UPDATED
ADVISORY IDCVE-2026-35414
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-35414
EXPLOITABILITY SCORE
2.8
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
5.4mediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2026-35414
EXPLOITABILITY SCORE
2.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)