SSH
Security incidents tagged SSH. Newest first.
0 SSH incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 554
- Longest quiet run: 753 days (Mar 25–Apr 15)
Show 2 older incidents2 older incidents
April 2025 1
CriticalErlang/OTP SSH: CVSS 10 unauthenticated RCE (CVE-2025-32433)Patched
Erlang/OTP SSH Patched
The Erlang/OTP SSH server processed connection-protocol messages before authentication, so anyone who could reach the port could run commands. It affects any product embedding the OTP SSH daemon. Fixed in OTP-27.3.3, 26.2.5.11 and 25.3.2.20; CISA confirmed exploitation in June.
Open incident →CVE-2025-32433
March 2023 1
MediumGitHub's RSA SSH host key briefly exposed in a public repoPatched
GitHub (github.com SSH) Patched
GitHub's private RSA SSH host key for github.com was briefly exposed in a public repository. GitHub rotated it as a precaution, which meant anyone connecting over SSH with RSA saw a host key mismatch warning until they updated known_hosts.
