CISA adds GPUStack, FreeSWITCH, OpenSSH, and Faspex flaws to KEV
Three flaws have confirmed exploitation; GPUStack and FreeSWITCH score 9.8 and allow admin or code execution.
Stories per day · 30 days
6 RSS
Relatedmusl18authentication-bypass13alpine-linux11ssh10alpine9sshole8cisa3credential-theft3freeswitch3gpustack3kev3openbsd3authentication2cisa-kev2ebury2exit-nodes2linux2post-quantum2
25 stories, newest first · one card per story
Stories tagged #openssh
GBHackers weekly bulletin lists 50 stories from November 2–6
The roundup's lead blurbs cite bank theft, exploited WordPress and Zyxel flaws, and an Android TV botnet takedown.
OpenSSH musl flaw CVE-2026-123158 exploited for SSH access
The bug needs musl, no PAM, a SHA-256 or SHA-512 password account, and a passwordless shadow entry; Alpine is most exposed.
3
Threat bulletin covers library ransomware and exploited SonicWall, OpenSSH flaws
SonicOS SAML VPN bypass and OpenSSH before 10.6p2 are described as actively exploited; Android 14–17 RCE is also patched.
4
Weekly recap: OpenSSH SSHole probed, Zyxel zero-day hits switches
Twenty OpenSSH attempts came from 13 IPs, and a Zyxel flaw was used on nearly 1,000 switches.
CISA adds four exploited vulnerabilities to the KEV catalog
The additions cover GPUStack, FreeSWITCH, OpenSSH, and Aspera Faspex; federal agencies must prioritize exposed assets that yield full control.
Hackers Begin Exploiting OpenSSH SSHole Authentication Bypass Vulnerability
SANS researcher reports active exploitation attempts against OpenSSH SSHole flaw allowing access to password-disabled accounts; fixes available.
CISA lists OpenSSH auth bypass in KEV catalog (CVE-2026-123158)
Federal agencies must apply vendor mitigations or stop using the product by November 12, 2026.
SSHHole: OpenSSH allows any password over 256 characters on musl systems
Bypass authentication in OpenSSH musl versions with any string longer than 256 characters, affecting Alpine, OpenWRT and IoT devices.
OpenSSH 10.6p2 password authentication bypass via invalid hash fields
OpenSSH 10.6p2 resolves a password authentication bypass vulnerability affecting accounts with invalid password hash fields in musl libc.
OpenSSH 10.6p2 released with musl libc workaround
OpenSSH 10.6p2 includes immediate mitigation for critical vulnerability affecting Linux systems using musl libc without PAM.
OpenBSD security advisory for OpenSSH prior to 10.6p2
OpenSSH before version 10.6p2 is affected; Canadian Centre for Cyber Security encourages users to review release notes and apply updates.
Musl libc allows long passwords to bypass root lock in OpenSSH
Passwords longer than 256 bytes accepted on musl-based SSHD despite * lock in shadow.
OpenBSD 8.0 adds hardening and experimental post-quantum SSH
The October 20 release ships OpenSSH 10.6 and LibreSSL 4.4.0, including an OCSP authorization-bypass fix and kernel memory fixes.
S7-1500 CPU 1518 MFP Linux subsystem flaws lack a fix
Firmware V3.1.7 and later on five 1518 and SIPLUS MFP CPUs is affected, including OpenSSH CVE-2021-41617.
Anthropic finds 94 cases where settings silently drop security controls
Claude’s review of 25 projects also found pre-authentication code paths; OpenSSH 10.6 cut that reachable code by about a fifth.
1
Attackers ran Ebury on 333 Tor exits to steal SSH passwords
About one in ten cited exit relays redirected port 22 to 12 interception servers from October 2 until BadExit flags and shutdowns on October 5.
Ebury on 333 Tor exits stole mail and man-in-the-middled SSH
About 10% of Tor exits ran Ebury 1.8.3; relays were BadExit-flagged by October 4 and later shut down.
USN-8928-1: OpenSSH vulnerabilities
Ubuntu patched OpenSSH flaws that could allow unintended SFTP writes or leak GSSAPI credentials.
The Unreasonable Effectiveness of Vex in NixOS
Blog post argues NixOS can automate VEX statements so teams skip unreachable CVE findings.
OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing
OpenSSH 10.6 disables risky compression, blocks shell-injecting usernames, and enables a post-quantum signature.
OpenSSH Ships on Every Mac, Linux Server and Windows. Its Creator Trusts No One
Profile of OpenSSH creator Theo de Raadt, whose OpenBSD design stayed outside the 2024 xz backdoor.
Self-hosted HTTP tunnels with SSH and Nginx
A write-up shows self-hosted HTTP tunnels using OpenSSH reverse forwards and nginx signed URLs.
USN-8804-1: OpenSSH vulnerabilities
Ubuntu patched two OpenSSH flaws, including command execution on 14.04 and an ECDSA bypass.