boxscore/security
PRODUCT · referenceProducts · latest edition

Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

OpenSSH

Product reference — OpenSSH by Openbsd · sector: Other. Cumulative disclosure record for this product across the archive.

Follow OpenSSH — Atom feed

Product totals

Disclosures & known-exploited
All-timeYTD
CVEs2623
KEV entries00
Rate & severity
KEV/100Med CVSSMed EPSSCHML
0.05.4.001716910

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over this product's disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▂▁▁▁▁▁▂▁▁▁▁▁▂▁▁▆▃▁█

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-110
2025-120
2026-010
2026-020
2026-030
2026-041
2026-050
2026-060
2026-078
2026-083
2026-090
2026-1011

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-353858.149.3HIGH—2026-04-02
CVE-2026-600007.548.6HIGH—2026-07-08
CVE-2025-619843.637.9LOW—2025-10-06
CVE-2026-1065526.528.0MEDIUM—2026-10-06
CVE-2026-600029.421.2CRITICAL—2026-07-08
CVE-2026-600016.520.2MEDIUM—2026-07-08
CVE-2026-599955.415.2MEDIUM—2026-07-08
CVE-2026-599965.415.2MEDIUM—2026-07-08
CVE-2025-327283.88.7LOW—2025-04-10
CVE-2026-1065856.58.0MEDIUM—2026-10-06
CVE-2026-1065823.77.3LOW—2026-10-06
CVE-2026-599986.57.0MEDIUM—2026-07-08
CVE-2026-599975.46.5MEDIUM—2026-07-08
CVE-2026-732824.85.1MEDIUM—2026-08-11
CVE-2026-599997.54.6HIGH—2026-07-08

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-1065837.83.9HIGH—2026-10-06
CVE-2026-1065856.58.0MEDIUM—2026-10-06
CVE-2026-1065873.30.3LOW—2026-10-06
CVE-2026-1065557.52.7HIGH—2026-10-06
CVE-2026-1065823.77.3LOW—2026-10-06
CVE-2026-1065883.12.3LOW—2026-10-06
CVE-2026-1065892.90.2LOW—2026-10-06
CVE-2026-1065864.31.9MEDIUM—2026-10-06
CVE-2026-1065843.30.0LOW—2026-10-06
CVE-2026-1065537.52.7HIGH—2026-10-06
CVE-2026-1065526.528.0MEDIUM—2026-10-06
CVE-2026-732832.50.4LOW—2026-08-11
CVE-2026-732824.85.1MEDIUM—2026-08-11
CVE-2026-732813.54.5LOW—2026-08-11
CVE-2026-600029.421.2CRITICAL—2026-07-08

KEV entries

No entries in the CISA KEV catalog.

Related

Vendor: Openbsd — all products and the full vendor record.

Methodology

A product is a (vendor, product) pair as named in the affected-product data. Rate statistics are arithmetic over published figures. Counts key to first-seen day. Raw counts are not comparable across products; this is a reference page assembled from the public record, not a ranking by our judgment.

Sources. CVE Program (cvelistV5), NVD (NIST), CISA KEV, FIRST EPSS.