Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
10 versions affected across 3 products
| Date | Total | Labels |
|---|
| 2026-02-02 | 1 | General1 |
| 2026-02-20 | 1 | Disclosure1 |
Two critical OpenSSH vulnerabilities discovered! Qualys TRU finds client and server flaws (CVE-2025-26465 & CVE-2025-26466) enabling MITM and… https://f.mtr.cool/vvhqednxzz
Post summary
Qualys reports two critical OpenSSH client and server vulnerabilities (CVE-2025-26465 & CVE-2025-26466) that can facilitate man‑in‑the‑middle attacks.
OpenSSH vulnerabilities & SSH malware are spiking! (CVE-2025-26466, RCEs, Terrapin). Is your AWS infrastructure truly secure? I help businesses with robust AWS setup & ongoing management, fortifying your cloud against evolving threats. Let's talk security! #AWS#CloudSecurity#SSH
Post summary
The message is a marketing note highlighting increased OpenSSH vulnerabilities, including CVE-2025-26466, without providing exploit details, patches, or evidence of active exploitation.
14 of 14 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | canonical | ubuntu_linux | 24.04 | - | - |
| OS | canonical | ubuntu_linux | 24.10 | - | - |
| OS | debian | debian_linux | 11.0 | - | - |
| OS | debian | debian_linux | 12.0 | - | - |
| OS | debian | debian_linux | 13.0 | - | - |
| App | openbsd | openssh | 9.5 | - | - |
| App | openbsd | openssh | 9.6 | - | - |
| App | openbsd | openssh | 9.6 | - | - |
| App | openbsd | openssh | 9.7 | - | - |
| App | openbsd | openssh | 9.7 | - | - |
| App | openbsd | openssh | 9.8 | - | - |
| App | openbsd | openssh | 9.8 | - | - |
| App | openbsd | openssh | 9.9 | - | - |
| App | openbsd | openssh | 9.9 | - | - |