OpenSSH ECDSA algorithm restriction bypass (CVE-2026-35387)

Summary

ECDSA algorithm restrictions may allow more algorithms than intended.

Vulnerability ID	Vulnerability Overview
CVE-2026-35387	Listing one ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms can be treated as permitting all ECDSA algorithms, weakening the administrator's configured algorithm restrictions.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices