CVE-2026-69397

HighCVSS 7.5

Published: 08/09/2026(UTC)Updated: 24/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.61%

47th percentile - higher than 47% of all known CVEs

Summary

A use-after-free vulnerability in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. The issue stems from using freed memory.

Risk Assessment

A remote unauthenticated attacker could execute arbitrary code on the vulnerable system, potentially leading to full system compromise and lateral movement.

Recommendation

Immediately update OpenSSH for Windows to a patched version and restrict SSH access to trusted IP addresses only.

Other vulnerabilities in OpenSSH for Windows

CVE-2026-97816Critical
OpenSSH for Windows is affected by a use after free vulnerability. This allows an unauthorized attacker to execute code over a network.

Original NVD description (English source)

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS