CISA lists OpenSSH auth bypass in KEV catalog (CVE-2026-123158)
Federal agencies must apply vendor mitigations or stop using the product by November 12, 2026.
Stories per day · 30 days
4 RSS
Relatedkernel6privilege-escalation4openssh3poc3use-after-free3integer-overflow2local-exploit2pf2shared-memory2authentication-bypass1calif1cisa-kev1ipsec1libexpat1libressl1linux1local1local-privilege-escalation1
17 stories, newest first · one card per story
Stories tagged #openbsd
OpenBSD top adds flag for chroot pledge unveil status
The top utility now uses a -Q flag to display each process's pledge chroot and unveil usage for quick security posture assessment.
OpenBSD security advisory for OpenSSH prior to 10.6p2
OpenSSH before version 10.6p2 is affected; Canadian Centre for Cyber Security encourages users to review release notes and apply updates.
OpenBSD 8.0 adds hardening and experimental post-quantum SSH
The October 20 release ships OpenSSH 10.6 and LibreSSL 4.4.0, including an OCSP authorization-bypass fix and kernel memory fixes.
OpenBSD 8.0 adds firewall hardening and vulnerability fixes
Errata also cover a remotely triggerable IPsec AES-GMAC kernel heap overflow on specific hardware; AES-GCM is unaffected.
OpenBSD 7.9 local root exploit chains old BSD bug with kernel flaw
Calif’s public chain bypasses KARL, SMAP, and SMEP; OpenBSD patched both issues in September via syspatch.
2
OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root
Researchers published a local OpenBSD kernel exploit chaining a decades-old shared-memory bug with an out-of-bounds write to gain root.
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Researchers published a local OpenBSD 7.9 root exploit chaining a 1988 shared-memory bug with a kernel use-after-free.
1
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Calif details a patched OpenBSD local-root bug tracing to a 37-year-old shared-memory counter.
37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released
Researchers released a patched OpenBSD local root exploit chaining a 37-year-old shared-memory bug.
Announce: OpenSSH 10.6 released
OpenSSH 10.6 is released as the project reports a surge of AI-assisted security bug reports.
OpenSSH Ships on Every Mac, Linux Server and Windows. Its Creator Trusts No One
Profile of OpenSSH creator Theo de Raadt, whose OpenBSD design stayed outside the 2024 xz backdoor.
OpenBSD Developers Reject Uutils Coreutils
OpenBSD developers, including Theo de Raadt, rejected a uutils coreutils port over licensing, Rust, and compatibility concerns.
A Recycled File Descriptor: CVE-2026-103547 in OpenBSD's ldapd
OpenBSD ldapd CVE-2026-103547 let a remote client inherit another connection's LDAP Bind via a recycled file descriptor.
sudo and OpenDoas timestamp files (2020)
A 2020 write-up demonstrates reusing sudo timestamp files across SSH sessions for passwordless sudo, fixed via session-leader start times.
1
From Report to Patch, the OpenBSD Errata Process
A talk walks through the OpenBSD errata process, tracing how vulnerability reports become coordinated, tested, and published security patches.
Mythos has made 2026 patching hell. It might make 2027 a breeze
Gartner analyst Craig Lawson argues AI bug-hunters like Anthropic's Mythos have audited major codebases so thoroughly that 2027 could see fewer severe vulnerabilities.
3