openssh (SUSE:Linux Micro 6.1) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Micro 6.1 package openssh, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2026-3497 — CVSS 7.5 (high): Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by…
• CVE-2025-26465 — CVSS 6.8 (medium): A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a…
• CVE-2025-26466 — CVSS 5.9 (medium): A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and…
• CVE-2025-61984 — CVSS 3.6 (low): ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially…
• CVE-2025-61985 — CVSS 3.6 (low): ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
• CVE-2026-35388 — CVSS 2.5 (low): OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.