CISA adds GPUStack, FreeSWITCH, OpenSSH, and Faspex flaws to KEV
Three flaws have confirmed exploitation; GPUStack and FreeSWITCH score 9.8 and allow admin or code execution.
82
Product
OpenSSH
- Mentions · 7d14
- Mentions · 30d24
- All mentions32
- First seenSep 16, 2026
- Last mentioned23h ago
Timeline
32 articles · newest firstBlog moves SSH keys onto YubiKey, TPM and Apple Secure Enclave
Leftover disk files are handles only; private material stays in the token, TPM or enclave.
22
GBHackers weekly bulletin lists 50 stories from November 2–6
The roundup's lead blurbs cite bank theft, exploited WordPress and Zyxel flaws, and an Android TV botnet takedown.
22
CISA adds exploited OpenSSH, GPUStack, FreeSWITCH, and IBM flaws to KEV
FCEB agencies must apply fixes by November 12; SSHole activity includes miners, metadata queries, and a Python C2 agent.
82
OpenSSH musl flaw CVE-2026-123158 exploited for SSH access
The bug needs musl, no PAM, a SHA-256 or SHA-512 password account, and a passwordless shadow entry; Alpine is most exposed.
86
Threat bulletin covers library ransomware and exploited SonicWall, OpenSSH flaws
SonicOS SAML VPN bypass and OpenSSH before 10.6p2 are described as actively exploited; Android 14–17 RCE is also patched.
66
Weekly recap: OpenSSH SSHole probed, Zyxel zero-day hits switches
Twenty OpenSSH attempts came from 13 IPs, and a Zyxel flaw was used on nearly 1,000 switches.
74
CISA adds four exploited vulnerabilities to the KEV catalog
The additions cover GPUStack, FreeSWITCH, OpenSSH, and Aspera Faspex; federal agencies must prioritize exposed assets that yield full control.
82
CISA lists OpenSSH auth bypass in KEV catalog (CVE-2026-123158)
Federal agencies must apply vendor mitigations or stop using the product by November 12, 2026.
80
Alpine Linux SSH lets attackers log in without password via *sshole
Alpine Linux and other distributions using OpenSSH with musl without PAM allow passwordless SSH access when SHA256 or SHA512 hashes and passwordless accounts are configured.
55
Portable OpenSSH 10.6p2 released
New release of OpenSSH includes security bug reports many of which were found with AI assistance.
45
OpenBSD security advisory for OpenSSH prior to 10.6p2
OpenSSH before version 10.6p2 is affected; Canadian Centre for Cyber Security encourages users to review release notes and apply updates.
25
OpenSSH password bypass affects Alpine servers using musl without PAM
Portable OpenSSH 10.6p2 adds a workaround; Alpine fixes include 3.21.10, 3.22.8, 3.23.8 and 3.24.4, with no CVE assigned.
68
Alpine OpenSSH bypass lets attackers log in without the password
A reachable sshd built without PAM accepts one 257-to-1024-byte password for accounts whose shadow field is *.
68
OpenBSD 8.0 adds hardening and experimental post-quantum SSH
The October 20 release ships OpenSSH 10.6 and LibreSSL 4.4.0, including an OCSP authorization-bypass fix and kernel memory fixes.
52
S7-1500 CPU 1518 MFP Linux subsystem flaws lack a fix
Firmware V3.1.7 and later on five 1518 and SIPLUS MFP CPUs is affected, including OpenSSH CVE-2021-41617.
54
Anthropic finds 94 cases where settings silently drop security controls
Claude’s review of 25 projects also found pre-authentication code paths; OpenSSH 10.6 cut that reachable code by about a fifth.
58
Attackers ran Ebury on 333 Tor exits to steal SSH passwords
About one in ten cited exit relays redirected port 22 to 12 interception servers from October 2 until BadExit flags and shutdowns on October 5.
74
Attackers hijacked 300-plus Tor exits to steal SSH passwords
Only password SSH logins over Tor from October 1 to 5 that accepted a fake host key could be captured.
72
APT28 uses Hookedge and an SSH tunnel against NATO defense firms
A naval shipbuilder intrusion starting July 24, 2026 lasted at least two months and included stolen credentials.
76
Attackers compromise 333 Tor exits to steal SSH passwords and deploy Ebury
The relays were about 10% of Tor’s exit capacity; Tor flagged them BadExit by October 4 and infected servers were shut down October 5.
78
Ebury on 333 Tor exits stole mail and man-in-the-middled SSH
About 10% of Tor exits ran Ebury 1.8.3; relays were BadExit-flagged by October 4 and later shut down.
76
Guide stores macOS SSH keys in the Secure Enclave with Touch ID
Non-extractable p-256-ne identities die with the Mac and must be re-registered, including on GitHub.
24
USN-8928-1: OpenSSH vulnerabilities
Ubuntu patched OpenSSH flaws that could allow unintended SFTP writes or leak GSSAPI credentials.
36
The Unreasonable Effectiveness of Vex in NixOS
Blog post argues NixOS can automate VEX statements so teams skip unreachable CVE findings.
38
Multiple OpenSSH Vulnerabilities Could Enable Plaintext Recovery, File Write and Injection Attacks
OpenSSH 10.6 fixes compression-based plaintext recovery, SFTP path writes, and username shell injection.
64
OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing
OpenSSH 10.6 disables risky compression, blocks shell-injecting usernames, and enables a post-quantum signature.
66
Announce: OpenSSH 10.6 released
OpenSSH 10.6 is released as the project reports a surge of AI-assisted security bug reports.
32
OpenSSH Ships on Every Mac, Linux Server and Windows. Its Creator Trusts No One
Profile of OpenSSH creator Theo de Raadt, whose OpenBSD design stayed outside the 2024 xz backdoor.
24
Self-hosted HTTP tunnels with SSH and Nginx
A write-up shows self-hosted HTTP tunnels using OpenSSH reverse forwards and nginx signed URLs.
32
USN-8804-1: OpenSSH vulnerabilities
Ubuntu patched two OpenSSH flaws, including command execution on 14.04 and an ECDSA bypass.
34
USN-8514-2: OpenSSH vulnerability
Ubuntu backports an OpenSSH fix to older LTS releases for an scp flaw enabling setuid file placement and privilege escalation.
35
Related CVEs
by mentions- CVE-2026-12315817%8.1Password bypass in OpenSSH before 10.6p2 on musl without PAM
- CVE-2026-102895<1%9.8Authentication bypass in GPUStack before 2.2.0
- CVE-2026-1167792%9.8Arbitrary command execution in FreeSWITCH sofia_presence_handle_sip_i_message()
- CVE-2026-123218<1%9.8Authorization bypass to admin in IBM Aspera Faspex 5.0.x
- CVE-2026-19868<1%7.5SAML bypass in SonicWall SonicOS SSLVPN
- CVE-2026-58868<1%9.8Heap buffer overflow in Android FrameDecoder allowing RCE
- CVE-2026-109518<1%7.7Man-in-the-middle RCE in APT on Debian and Ubuntu
- CVE-2021-416173%7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not…
- CVE-2026-35387<1%6.5OpenSSH before 10.3 can use unintended ECDSA algorithms
Appears with
- OpenBSDvendor · 8
- CISAorganization · 6
- Tor Projectorganization · 4
- Torproduct · 4
- Eburymalware · 4
- IBMvendor · 3
- SignalWirevendor · 3
- Aspera Faspexproduct · 3
- OpenSSHvendor · 3
- FreeSWITCHproduct · 3
- Previdianorganization · 2
- Alpinevendor · 2
- Red Hatvendor · 2
- Microsoftvendor · 2
- OPSSHIELDvendor · 2
- OpenSSHorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.