openssh (SUSE:Linux Enterprise Server for SAP Applications 15 SP6) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 15 SP6 package openssh, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2026-3497 — CVSS 7.5 (high): Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by…
• CVE-2026-35385 — CVSS 7.5 (high): In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the…
• CVE-2026-35414 — CVSS 4.2 (medium): OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with…
• CVE-2026-35388 — CVSS 2.5 (low): OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.