{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T19:58:23.236Z",
  "tag": {
    "id": "ssh",
    "label": "SSH",
    "isStack": false,
    "url": "https://pwn.watch/t/ssh",
    "feed": "https://pwn.watch/t/ssh/feed.xml"
  },
  "counts": {
    "incidents": 2,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "erlang-otp-ssh-unauthenticated-rce-cve-2025-32433",
      "title": "Erlang/OTP SSH: CVSS 10 unauthenticated RCE (CVE-2025-32433)",
      "url": "https://pwn.watch/i/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433",
      "json": "https://pwn.watch/i/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Erlang/OTP SSH",
      "tags": [
        "erlang",
        "ssh",
        "rce",
        "auth-bypass",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-32433"
      ],
      "affectedVersions": [
        "OTP SSH before OTP-27.3.3, OTP-26.2.5.11, OTP-25.3.2.20"
      ],
      "fixedVersions": [
        "OTP-27.3.3",
        "OTP-26.2.5.11",
        "OTP-25.3.2.20"
      ],
      "startedAt": "2025-04-16",
      "closedAt": "2025-06-09",
      "updatedAt": "2025-06-09",
      "summary": "The Erlang/OTP SSH server processed connection-protocol messages before authentication, so anyone who could reach the port could run commands. It affects any product embedding the OTP SSH daemon. Fixed in OTP-27.3.3, 26.2.5.11 and 25.3.2.20; CISA confirmed exploitation in June.",
      "xPost": null
    },
    {
      "slug": "github-rsa-ssh-host-key-exposed-2023",
      "title": "GitHub's RSA SSH host key briefly exposed in a public repo",
      "url": "https://pwn.watch/i/github-rsa-ssh-host-key-exposed-2023",
      "json": "https://pwn.watch/i/github-rsa-ssh-host-key-exposed-2023.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "GitHub (github.com SSH)",
      "tags": [
        "devtools",
        "github",
        "ssh",
        "secrets"
      ],
      "cveIds": [],
      "affectedVersions": [],
      "fixedVersions": [],
      "startedAt": "2023-03-24",
      "closedAt": "2023-03-24",
      "updatedAt": "2023-03-24",
      "summary": "GitHub's private RSA SSH host key for github.com was briefly exposed in a public repository. GitHub rotated it as a precaution, which meant anyone connecting over SSH with RSA saw a host key mismatch warning until they updated known_hosts.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "erlang-otp-ssh-unauthenticated-rce-cve-2025-32433",
      "incidentTitle": "Erlang/OTP SSH: CVSS 10 unauthenticated RCE (CVE-2025-32433)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-09",
      "title": "CISA adds CVE-2025-32433 to KEV",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433"
    },
    {
      "incident": "erlang-otp-ssh-unauthenticated-rce-cve-2025-32433",
      "incidentTitle": "Erlang/OTP SSH: CVSS 10 unauthenticated RCE (CVE-2025-32433)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-04-18",
      "title": "Discussion and PoC references on oss-security",
      "body": null,
      "sourceUrl": "https://openwall.com/lists/oss-security/2025/04/18/2",
      "url": "https://pwn.watch/i/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433"
    },
    {
      "incident": "erlang-otp-ssh-unauthenticated-rce-cve-2025-32433",
      "incidentTitle": "Erlang/OTP SSH: CVSS 10 unauthenticated RCE (CVE-2025-32433)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-04-16",
      "title": "Erlang/OTP publishes advisory GHSA-37cp-fgq5-7wc2 and patched releases",
      "body": null,
      "sourceUrl": "https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2",
      "url": "https://pwn.watch/i/erlang-otp-ssh-unauthenticated-rce-cve-2025-32433"
    },
    {
      "incident": "github-rsa-ssh-host-key-exposed-2023",
      "incidentTitle": "GitHub's RSA SSH host key briefly exposed in a public repo",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-03-24",
      "title": "GitHub replaces its RSA SSH host key; users must update known_hosts",
      "body": null,
      "sourceUrl": "https://github.blog/news-insights/company-news/we-updated-our-rsa-ssh-host-key/",
      "url": "https://pwn.watch/i/github-rsa-ssh-host-key-exposed-2023"
    }
  ]
}