CVE-2026-70163
HighCVSS 7.5Summary
A vulnerability in OpenSSH for Windows involves allocation of resources without limits or throttling. An unauthenticated attacker can cause a denial of service over the network.
Risk Assessment
A network-based attacker can exhaust SSH server resources, making the service unavailable to legitimate users. This may disrupt remote administration and other processes relying on SSH.
Recommendation
Update OpenSSH for Windows to a patched version and consider implementing connection limits and network-level rate limiting.
Other vulnerabilities in OpenSSH for Windows
See all- CVE-2026-88157High
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- CVE-2026-83871High
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
- CVE-2026-83769High
A use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
- CVE-2026-83754High
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- CVE-2026-97816Critical
OpenSSH for Windows is affected by a use after free vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-69397High
A use-after-free vulnerability in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. The issue stems from using freed memory.
Original NVD description (English source)
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS