CVE-2025-32728

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

Scoring

Severity

MEDIUM

CVSS base score

4.3

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

EPSS probability

0.20%

CWE

CWE-440

Published

2025-04-10

Last modified

2026-03-13

Affected products

• OpenBSD OpenSSH

Weakness type

• CWE-440

Related vulnerabilities

• CVE-2026-16769 — RS9116W/SiWx917 plaintext pause encryption request causes DOS
• CVE-2026-65934 — BT122 plaintext pause encryption request causes DOS
• CVE-2026-65932 — BT122 stops advertising
• CVE-2026-8806 — Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module
• CVE-2026-42752 — WordPress Stripe Payments plugin <= 2.0.98 - Bypass Vulnerability vulnerability
• CVE-2026-49316 — Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdown
• CVE-2026-42534 — Jostle logic bypass degrades resolution performance
• CVE-2026-41136 — free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer

Markdown version · Browse all CVEs