News for hackers. Stuff that matters.
Re:Show HN: ssh ssh.place by mr_mitm on Monday August 03, 2026 @08:31AM (#49154886)
Here is a recent example. Currently unpatched in Debian stable.

https://www.cve.org/CVERecord?id=CVE-2026-60002

As I understood this, a malicious server can change its host key somewhere during key exchange and trigger a use-after-free in the client, which might be exploitable for code execution.

There are no comments on this comment yet.