CVE-2026-35414
ADVISORY - nistSummary
OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.
Common Weakness Enumeration (CWE)
ADVISORY - nist
Always-Incorrect Control Flow Implementation
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-35414
EXPLOITABILITY SCORE
1.6
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
4.2mediumDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-35414
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-