Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2026-35386

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.

CVSS 3.6 · LowBuzz score 37.9

Buzz score

Why this CVE is surfacing

Buzz score total 37.9

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 17.9 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
17.9
5 evidence mentions in the snapshot
Diversity score
20.0
5 sources across 5 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
5 source links · newest first
  • Debian 13.5 point release lands with security fixes, bug patchesHelp Net Security

    Debian 13.5 is the fifth point release for the stable distribution “trixie.” The update folds in roughly 100 Debian Security Advisories and corrections for more than 130 source packages, covering everything from the Linux kernel and Apache HTTP Server to OpenSSH, sudo, systemd, OpenSSL, glibc, and FreeRDP. Fresh installer images carrying the same fixes will follow at the regular download locations. Sysadmins running trixie do not need to reinstall. Existing media remain valid, and machines … More →

    newswww.helpnetsecurity.comMay 17, 2026, 10:03 PM
  • CVE-2026-35386Microsoft MSRC

    Information published.

    vendormsrc.microsoft.comApr 11, 2026, 8:39 AM
  • https://www.openwall.com/lists/oss-security/2026/04/02/3www.openwall.com

    No excerpt available.

    Exploitwww.openwall.comApr 2, 2026, 5:16 PM
  • https://www.openssh.org/releasenotes.html#10.3p1www.openssh.org

    No excerpt available.

    Release Noteswww.openssh.orgApr 2, 2026, 5:16 PM
  • https://marc.info/?l=openssh-unix-dev&m=177513443901484&w=2marc.info

    No excerpt available.

    Vendor Advisorymarc.infoApr 2, 2026, 5:16 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2026-68930

    Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for recipient channel IDs that were never opened or confirmed in ru…

    CVSS 6.5 · Medium
    3 mentions
  • CVE-2026-44108

    Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal s…

    CVSS 9.3 · Critical
    1 mention
  • CVE-2026-67217

    cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON_Utils.c. For a replace operation that is missing its value member, or a move o…

    CVSS 6.9 · Medium
    3 mentions
  • CVE-2026-65100

    Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure leaves the encoder out of sync with the…

    CVSS 6.3 · Medium
    1 mention
  • CVE-2026-14169

    Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could resu…

    CVSS 8.1 · High
    1 mention
  • CVE-2026-56355

    GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

    CVSS 3.7 · Low
    6 mentions