3 ms·
Critical Zero-Day Vulnerability Discovered in OpenSSH – Patch Immediately
A critical zero-day vulnerability (CVE-2025-38897) has been discovered in OpenSSH, affecting most Unix-based systems running versions 9.3 and earlier. The flaw allows unauthenticated remote code execution under specific conditions, posing a serious risk to public-facing servers. The exploit has already been seen in active use by threat actors.
- yourpaltod 1y agoLiterally any other information on this? Right now this feels like AI-hallucination. Unpublished CVE (as of the time of this post), nothing actually useful to act on.
- evanjrowley 1y ago>The flaw allows unauthenticated remote code execution under specific conditions Are the conditions highly specific or are they the default configuration for most OpenSSH installations?
- ruku 1y agoI don’t think this a valid disclosure here. Without any information
- ruku 1y ago[dead]