Occurred
First published · Last updated
CVE-2026-123158: OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
Reported by CISA Known Exploited Vulnerabilities
The source reports an OpenBSD OpenSSH vulnerability on Linux involving an unexpected status code or return value that could allow authentication bypass. It advises applying mitigations under vendor instructions and cited CISA guidance; the source was published November 9, 2026.
Share this event
Follow: Events in United States
Why it matters
The source identifies a potential authentication bypass and calls for mitigations in accordance with the cited guidance.
Generated scores
Scores are based on the cited reporting and use a 1–10 scale. Read the methodology.
- Confidence
- 6/10
- Geographic reach
- 1/10
- Global importance
- 2/10
- Impact magnitude
- 3/10
- Urgency
- 5/10
Primary official sources
- CISA Known Exploited VulnerabilitiesCVE-2026-123158: OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
Read our editorial process and corrections policy.
Continue exploring
Related developments reported in the last 30 days. These are not necessarily ongoing incidents.
Loading related developments…
Explore events in united states
