OpenSSH proxy-mode multiplexing confirmation bypass (CVE-2026-35388)

Summary

Proxy-mode multiplexing sessions may omit a required connection confirmation.

Vulnerability ID	Vulnerability Overview
CVE-2026-35388	OpenSSH can fail to request connection multiplexing confirmation for proxy-mode sessions, bypassing the intended confirmation step for those connections.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices