Weakness (CWE)

CWE-394: Unexpected Status Code or Return Value

Base Draft

The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.

Source: MITRE CWE-394

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2026-123158 Exploited Public exploit

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentic…

OpenBSD OpenSSH openssh openssh Debian Ubuntu Alpine

Nov 5, 2026

CWE-394: Unexpected Status Code or Return Value

sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentic…