openssh security

Microsoft updated its Security Update Guide on June 4, 2026 for CVE-2026-35414, a Moderate OpenSSH flaw affecting versions before 10.3 and Microsoft’s Azure Linux 3.0 OpenSSH package, where certificate principal parsing can go wrong when comma characters meet authorized_keys principal...

CVE-2026-35386 is a reminder that not every security flaw is a smash-and-grab bug. In this case, Microsoft’s update guide language points to an issue whose successful exploitation depends on conditions outside the attacker’s direct control, meaning the exploit path is not universally reliable or...