CVE-2026-60002
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)
Published: 2026-07-08 · CVSS: 7.7 · CVSS 3.1
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7