CVE-2026-35414
MEDIUM
NVD
CVSS Score
4.2
Severity
MEDIUM
Published
Apr 02, 2026
Vendor
unknown
Description
OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.