OpenSSH
opensshcounted 2026-10-07 03:22 UTC
As of 2026-10-07, 4 928 993 hosts ran OpenSSH with at least one known CVE on a service open at their latest check, across 226 versions with CVEs; 131 distinct CVEs.
Known CVEs on hosts running it
4 928 993hosts with known CVEs
131distinct CVEs
226versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 68 104 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 9.6p1 | 1 636 090 | 33 |
| 8.9p1 | 984 715 | 36 |
| 7.4 | 672 460 | 45 |
| 9.2p1 | 522 059 | 36 |
| 10.0p2 | 155 742 | 29 |
| 8.2p1 | 117 625 | 40 |
| 10.0 | 115 654 | 29 |
| 7.9p1 | 89 862 | 43 |
| 10.2p1 | 75 334 | 27 |
| 8.4p1 | 69 721 | 37 |
| 9.3 | 51 345 | 35 |
| 7.4p1 | 38 105 | 45 |
| 5.3 | 31 611 | 64 |
| 8.0 | 25 248 | 39 |
| 9.6 | 25 185 | 33 |
| 9.9p1 | 25 046 | 31 |
| 8.2 | 23 092 | 40 |
| 10.3 | 19 201 | 22 |
| 6.6.1 | 18 753 | 57 |
| 9.5 | 18 086 | 35 |
| 6.7p1 | 17 811 | 59 |
| 10.2 | 17 496 | 27 |
| 7.2p2 | 11 843 | 54 |
| 7.8 | 11 119 | 44 |
| 8.7 | 10 493 | 37 |
| 7.6p1 | 10 021 | 44 |
| 9.8 | 9 619 | 32 |
| 8.8 | 9 461 | 35 |
| 6.0p1 | 8 833 | 62 |
| 7.5 | 7 699 | 45 |
| 8.1 | 7 607 | 38 |
| 4.3 | 6 857 | 72 |
| 8.4 | 6 710 | 38 |
| 8.5 | 6 488 | 37 |
| 10.4 | 5 587 | 14 |
| 8.6 | 5 141 | 38 |
| 9.7 | 4 678 | 33 |
| 7.9 | 4 635 | 43 |
| 7.2 | 4 501 | 54 |
| 9.9 | 4 299 | 31 |
| 7.6 | 3 941 | 44 |
| 7.7 | 3 636 | 45 |
| 9.1 | 3 219 | 37 |
| 8.9 | 2 648 | 36 |
| 7.3 | 2 250 | 50 |
| 9.0 | 2 175 | 36 |
| 8.3 | 2 078 | 39 |
| 6.2 | 2 024 | 63 |
| 7.1 | 1 967 | 58 |
| 6.4 | 1 740 | 62 |
176 more versions
86 more versions were seen only in older observations.
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2026-73282 MEDIUM 4.8 | 4 707 261 |
| CVE-2026-73281 LOW 3.5 | 4 707 261 |
| CVE-2026-73283 LOW 2.5 | 4 707 261 |
| CVE-2026-60002 HIGH 7.7 | 4 452 760 |
| CVE-2026-60000 HIGH 7.5 | 4 452 760 |
| CVE-2026-59998 MEDIUM 6.5 | 4 452 760 |
| CVE-2026-60001 MEDIUM 6.5 | 4 452 760 |
| CVE-2026-59999 MEDIUM 5.9 | 4 452 760 |
| CVE-2026-59995 MEDIUM 5.4 | 4 452 760 |
| CVE-2026-59996 MEDIUM 5.4 | 4 452 760 |
| CVE-2026-59997 MEDIUM 5.4 | 4 452 760 |
| CVE-2026-35385 HIGH 8.1 | 2 231 087 |
| CVE-2026-35414 HIGH 8.1 | 2 231 087 |
| CVE-2026-35387 MEDIUM 6.5 | 2 231 087 |
| CVE-2026-35388 LOW 2.5 | 2 231 087 |
| CVE-2025-61984 LOW 3.6 | 2 023 831 |
| CVE-2025-61985 LOW 3.6 | 2 023 831 |
| CVE-2025-32728 LOW 3.8 | 1 618 335 |
| CVE-2025-26465 MEDIUM 6.8 | 1 557 182 |
| CVE-2023-51385 MEDIUM 6.5 | 666 876 |
| CVE-2023-48795 MEDIUM 5.9 | 665 891 |
| CVE-2023-38408 CRITICAL 9.8 | 624 279 |
| CVE-2021-41617 HIGH 7.0 | 378 878 |
| CVE-2021-36368 LOW 3.7 | 378 740 |
| CVE-2016-20012 MEDIUM 5.3 | 373 431 |
| CVE-2024-6387 HIGH 8.1 | 365 798 |
| CVE-2020-15778 HIGH 7.4 | 265 539 |
| CVE-2020-14145 MEDIUM 5.9 | 250 884 |
| CVE-2019-6111 MEDIUM 5.9 | 188 771 |
| CVE-2019-6109 MEDIUM 6.8 | 187 185 |
| CVE-2018-20685 MEDIUM 5.3 | 187 178 |
| CVE-2023-51384 MEDIUM 5.5 | 183 994 |
| CVE-2019-6110 MEDIUM 6.8 | 178 905 |
| CVE-2018-15473 MEDIUM 5.3 | 168 434 |
| CVE-2018-15919 MEDIUM 5.3 | 150 556 |
| CVE-2026-35386 HIGH 8.1 | 144 064 |
| CVE-2017-15906 MEDIUM 5.3 | 141 094 |
| CVE-2025-26466 MEDIUM 5.9 | 136 296 |
| CVE-2023-28531 CRITICAL 9.8 | 112 406 |
| CVE-2024-39894 HIGH 7.5 | 107 854 |
| CVE-2026-106552 N/A | 98 341 |
| CVE-2026-106553 N/A | 98 341 |
| CVE-2026-106555 N/A | 98 341 |
| CVE-2026-106582 N/A | 98 341 |
| CVE-2026-106583 N/A | 98 341 |
| CVE-2026-106584 N/A | 98 341 |
| CVE-2026-106585 N/A | 98 341 |
| CVE-2026-106586 N/A | 98 341 |
| CVE-2026-106587 N/A | 98 341 |
| CVE-2026-106588 N/A | 98 341 |
| CVE-2026-106589 N/A | 98 341 |
| CVE-2021-28041 HIGH 7.1 | 86 083 |
| CVE-2016-10708 HIGH 7.5 | 72 151 |
| CVE-2016-10012 HIGH 7.8 | 68 863 |
| CVE-2016-10009 HIGH 7.3 | 68 863 |
| CVE-2016-10011 MEDIUM 6.2 | 68 863 |
| CVE-2016-10010 HIGH 7.0 | 68 655 |
| CVE-2016-6515 HIGH 7.5 | 61 706 |
| CVE-2016-6210 MEDIUM 5.9 | 61 706 |
| CVE-2015-8325 HIGH 7.8 | 61 380 |
| CVE-2016-3115 MEDIUM 6.4 | 61 378 |
| CVE-2016-1908 CRITICAL 9.8 | 55 227 |
| CVE-2015-5600 HIGH 8.1 | 52 328 |
| CVE-2015-6564 HIGH 7.0 | 52 328 |
| CVE-2015-6563 MEDIUM 6.4 | 52 328 |
| CVE-2015-5352 MEDIUM 4.3 | 51 361 |
| CVE-2019-16905 HIGH 7.8 | 47 215 |
| CVE-2020-12062 HIGH 7.5 | 27 784 |
| CVE-2014-2653 MEDIUM 6.5 | 27 721 |
| CVE-2014-2532 MEDIUM 4.2 | 25 840 |
| CVE-2016-0777 MEDIUM 6.5 | 23 391 |
| CVE-2014-1692 HIGH 7.3 | 23 095 |
| CVE-2010-5107 HIGH 7.5 | 21 101 |
| CVE-2016-0778 HIGH 8.1 | 18 752 |
| CVE-2011-5000 LOW 3.5 | 18 395 |
| CVE-2012-0814 MEDIUM 6.5 | 16 843 |
| CVE-2011-4327 MEDIUM 5.5 | 16 693 |
| CVE-2010-4755 MEDIUM 4.0 | 16 693 |
| CVE-2010-4478 CRITICAL 9.8 | 15 143 |
| CVE-2016-8858 HIGH 7.5 | 12 955 |
| CVE-2007-2243 MEDIUM 5.0 | 10 705 |
| CVE-2007-4752 HIGH 7.5 | 10 674 |
| CVE-2008-3259 LOW 1.2 | 10 482 |
| CVE-2006-5051 HIGH 8.1 | 9 785 |
| CVE-2006-5794 HIGH 7.5 | 9 450 |
| CVE-2006-5052 MEDIUM 5.0 | 9 355 |
| CVE-2006-4924 HIGH 7.8 | 9 010 |
| CVE-2016-1907 MEDIUM 5.3 | 4 347 |
| CVE-2023-25136 MEDIUM 6.5 | 3 227 |
| CVE-2013-4548 MEDIUM 6.0 | 2 088 |
| CVE-2006-0225 MEDIUM 4.6 | 1 597 |
| CVE-2005-2798 MEDIUM 5.0 | 1 541 |
| CVE-2005-2666 LOW 1.2 | 1 541 |
| CVE-2015-6565 HIGH 7.2 | 1 467 |
| CVE-2004-1653 MEDIUM 6.4 | 1 345 |
| CVE-2008-1657 MEDIUM 6.5 | 1 294 |
| CVE-2009-2904 MEDIUM 6.9 | 1 016 |
| CVE-2003-0682 HIGH 7.5 | 805 |
| CVE-2003-0695 HIGH 7.5 | 805 |
| CVE-2003-0693 HIGH 10.0 | 639 |
Hosts: matches on services open at each host's latest check, over every version.