CVE-2026-123158: OpenBSD OpenSSH Unexpected Status Code or Return Value
OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability. OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass.
- CISA KEV-listed (remediation due 2026-11-12)
- EPSS 18.9% (97.3% percentile)
- CVSS 8.1 high