boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-55655

CVE-2026-55655MEDIUM
Red Hat Red Hat Enterprise Linux 10 — Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   N   R  U  H  L  N    6.1   .0014    2.8     —
AFFECTED
  Product                                                         Versions     Fixed
  Red Hat Enterprise Linux 10                                     unspecified  0:9.9p1-25.el10_2
  Red Hat Enterprise Linux 10.0 Extended Update Support           unspecified  0:9.9p1-7.el10_0.5
  Red Hat Enterprise Linux 8                                      unspecified  0:8.0p1-30.el8_10
  Red Hat Enterprise Linux 8                                      unspecified  0:8.0p1-30.el8_10
  Red Hat Enterprise Linux 9                                      unspecified  0:9.9p1-9.el9_8
  Red Hat Enterprise Linux 9                                      unspecified  0:9.9p1-9.el9_8
  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions  unspecified  0:8.7p1-38.el9_4.10
  Red Hat Enterprise Linux 9.6 Extended Update Support            unspecified  0:8.7p1-45.el9_6.5
  Red Hat Hardened Images                                         unspecified  10.3p1-6.hum1
  Red Hat OpenShift AI 3.0                                        unspecified  1791818590
  + 44 more
TIMELINE
  Jun 16  Reserved by redhat
  Jun 23  Published (CNA: redhat)
  Aug 12  RESCORED — CVE-2026-55655 (Red Hat Enterprise Linux 10). CVSS 5 → 6.1 (NVD).
CWE-923 · CNA: redhat · CVSS v3.1 · 48 references · NVD status: Modified

Description

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
June 16, 2026ReservedReserved by redhat
June 23, 2026PublishedPublished (CNA: redhat)
August 12, 2026RESCOREDRESCORED — CVE-2026-55655 (Red Hat Enterprise Linux 10). CVSS 5 → 6.1 (NVD).

Affected

Affected products and packages — 54 rows
VendorProduct / PackageEcosystemVersion introducedFixed
Red HatRed Hat Enterprise Linux 10——0:9.9p1-25.el10_2
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support——0:9.9p1-7.el10_0.5
Red HatRed Hat Enterprise Linux 8——0:8.0p1-30.el8_10
Red HatRed Hat Enterprise Linux 8——0:8.0p1-30.el8_10
Red HatRed Hat Enterprise Linux 9——0:9.9p1-9.el9_8
Red HatRed Hat Enterprise Linux 9——0:9.9p1-9.el9_8
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions——0:8.7p1-38.el9_4.10
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support——0:8.7p1-45.el9_6.5
Red HatRed Hat Hardened Images——10.3p1-6.hum1
Red HatRed Hat OpenShift AI 3.0——1791818590
Red HatRed Hat OpenShift AI 3.0——1791818589
Red HatRed Hat OpenShift AI 3.0——1791818505
Red HatRed Hat OpenShift AI 3.0——1791818496
Red HatRed Hat OpenShift AI 3.0——1791818502
Red HatRed Hat OpenShift AI 3.2——1791818602
Red HatRed Hat OpenShift AI 3.2——1791818598
Red HatRed Hat OpenShift AI 3.2——1791818512
Red HatRed Hat OpenShift AI 3.2——1791818587
Red HatRed Hat OpenShift AI 3.2——1791818778
Red HatRed Hat OpenShift AI 3.2——1791818512
Red HatRed Hat OpenShift AI 3.3——1791818782
Red HatRed Hat OpenShift AI 3.3——1791818782
Red HatRed Hat OpenShift AI 3.3——1791818627
Red HatRed Hat OpenShift AI 3.3——1791818790
Red HatRed Hat OpenShift AI 3.3——1791818874
Red HatRed Hat OpenShift AI 3.3——1791818792
Red HatRed Hat OpenShift AI 3.3——1791818662
Red HatRed Hat OpenShift AI 3.3——1791818877
Red HatRed Hat OpenShift AI 3.4——1791883722
Red HatRed Hat OpenShift AI 3.4——1791881612
Red HatRed Hat OpenShift AI 3.4——1791885618
Red HatRed Hat OpenShift AI 3.4——1791881487
Red HatRed Hat OpenShift AI 3.4——1791881732
Red HatRed Hat OpenShift AI 3.4——1791883315
Red HatRed Hat OpenShift AI 3.4——1791881486
Red HatRed Hat OpenShift AI 3.4——1791881769
Red HatRed Hat OpenShift AI 3.4——1791885505
Red HatRed Hat OpenShift AI 3.5——1791819252
Red HatRed Hat OpenShift AI 3.5——1791818749
Red HatRed Hat OpenShift AI 3.5——1791819206
Red HatRed Hat OpenShift AI 3.5——1791818979
Red HatRed Hat OpenShift AI 3.5——1791819123
Red HatRed Hat OpenShift AI 3.5——1791818901
Red HatRed Hat OpenShift AI 3.5——1791820333
Red HatRed Hat OpenShift AI 3.5——1791819495
Red HatRed Hat OpenShift AI 3.5——1791819104
Red HatRed Hat Update Infrastructure 5——1786435483
Red HatRed Hat Update Infrastructure 5——1786533529
Red HatRed Hat Update Infrastructure 5——1787135742
Red HatRed Hat Update Infrastructure 5——1787241260
Red HatRed Hat Enterprise Linux 6———
Red HatRed Hat Enterprise Linux 7———
Red HatRed Hat OpenShift Container Platform 4———
Red HatRed Hat OpenShift Container Platform 4———

Weaknesses

CWE-923

References (48)

Related

Authoritative record: CVE-2026-55655 at cve.org

Vendors: red hat

Weaknesses: CWE-923

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-55655 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.