OpenSSH DisableForwarding tunnel restriction bypass (CVE-2026-59999)

Summary

Tunnel forwarding may remain permitted despite DisableForwarding=yes.

Vulnerability ID	Vulnerability Overview
CVE-2026-59999	The SSH daemon does not correctly give DisableForwarding=yes precedence over PermitTunnel=yes. A configuration intended to disable forwarding can therefore still permit tunnel functionality.

Affected Supported TeraStations

TS5020 / TS3030
- Fixed in firmware version 3.16
 

 

Back to Security Notices

Date	Description
10/14/2026	Initial release

Back to Security Notices