CVE CyberSecurity Database News (Page 9)

Apr 2, 2026

CVE-2026-35388 - Critical OpenSSH Proxy Multiplexing Bug Exposes Secure Shell Sessions

In June 2026, a serious security flaw named CVE-2026-35388 was disclosed in all versions of OpenSSH before 10.3. This vulnerability targets the system’s

Apr 2, 2026

CVE-2026-35387 - How OpenSSH Before 10.3 Misinterprets ECDSA Algorithms (And Why That’s Dangerous)

OpenSSH is probably the most important tool when it comes to secure remote logins and file transfers. If you’re running Linux or BSD, chances

Apr 2, 2026

CVE-2026-35386 - Exploiting OpenSSH via Username Shell Metacharacters in Non-default `%` Configurations

Summary: A recently unearthed vulnerability—CVE-2026-35386—affects OpenSSH versions before 10.3 when used with some non-default configurations. If you accept untrusted usernames on the

Apr 2, 2026

CVE-2026-35385 - OpenSSH SCP Protocol Setuid/Setgid File Installation Flaw (Exclusive Exploit Breakdown)

A quietly dangerous flaw exists in versions of OpenSSH before 10.3, where a file downloaded over SCP as root with -O (Old protocol) and

Apr 1, 2026 Google Chrome

CVE-2026-5281 - Understanding the “Use After Free” Vulnerability in Dawn on Google Chrome (Before 146..768.178)

Recently, a critical vulnerability known as CVE-2026-5281 was discovered in the graphics engine Dawn as used within Google Chrome. Affecting Chrome versions prior to 146.