VulnSocial

CVE-2026-55654Disclosure(openbsd / enterprise_linux)

LOWCVSS 3.7 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

openbsd CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • enterprise_linux
  • hardened_images
  • openssh

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
openbsdredhat
Products
enterprise_linuxhardened_imagesopenssh

6 versions affected across 3 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-23: 2Technical Details · 2026-06-23: 206-23
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-55654 A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Inte… https://www.cve.org/CVERecord?id=CVE-2026-55654 ----- Traducción: Se encontró una fa… http://infoflow.cloud`

    Post summary

    A heap out‑of‑bounds read vulnerability (CVE-2026-55654) has been identified in OpenSSH during GSSAPI cleanup, with no PoC, exploit, or patch discussed.

    0000032
    88 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-55654 A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Inte… https://www.cve.org/CVERecord?id=CVE-2026-55654

    Post summary

    The post announces a heap out‑of‑bounds read flaw in OpenSSH’s GSSAPI cleanup, but does not mention PoCs, exploits, patches, or active exploitation.

    00000884
    57.7K followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
Appopenbsdopenssh---
OSredhatenterprise_linux10.0--
OSredhatenterprise_linux6.0--
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--
OSredhatenterprise_linux9.0--
Appredhathardened_images---

Explore more

Back to dashboardopenbsd CVEsredhat CVEsenterprise_linux vulnerabilities