Is CVE-2026-59999 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-59999?

CVE-2026-59999 has a CVSS v3 severity of MEDIUM (5.9).

Back

Description

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.