[TheRegister] FreSSH bugs undiscovered for years threaten OpenSSH security
Qualys discovered the bugs in January, per its disclosure timeline. These vulnerabilities allow miscreants to perform machine-in-the-middle (MitM) attacks on the OpenSSH client and pre-authentication denial-of-service (DoS) attacks. Patches for CVE-2025-26465 and CVE-2025-26466 were released this morning.
OpenSSH bugs threaten enterprise security, uptime
Exploit code now available for MitM and DoS attacks
Connor Jones
More like this
- HTTP2Shell (CVE-2026-111497): What the Brotli Decoder Bug Really Hits, and How to Patch
- Package Cooldowns Compared: GitHub Package Firewall vs. What npm, pnpm, Yarn, Bun, pip, uv and Poetry Already Do
- Your Mesh VPN Agent Is Root on Every Box. Tailworm Is the Reminder.
- eMudhra Broke Almost Nothing, and Still Dented the Chain of Trust