Planet Briefing

Occurred

First published · Last updated

CVE-2026-123158: OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability

Reported by CISA Known Exploited Vulnerabilities

The source reports an OpenBSD OpenSSH vulnerability on Linux involving an unexpected status code or return value that could allow authentication bypass. It advises applying mitigations under vendor instructions and cited CISA guidance; the source was published November 9, 2026.

© Belgian Presidency of the Council of the European Union / Julien Nizet
Illustrative image: © Belgian Presidency of the Council of the European Union / Julien Nizet — belgium24.eu/Wikimedia Commons, CC BY 2.0
Share this event

Follow: Events in United States

Manage follows

Why it matters

The source identifies a potential authentication bypass and calls for mitigations in accordance with the cited guidance.

Generated scores

Scores are based on the cited reporting and use a 1–10 scale. Read the methodology.

Confidence
6/10
Geographic reach
1/10
Global importance
2/10
Impact magnitude
3/10
Urgency
5/10

Primary official sources

Report an issue

Read our editorial process and corrections policy.

Continue exploring

Related developments reported in the last 30 days. These are not necessarily ongoing incidents.

Loading related developments…

Explore events in united states