Qualys TRU Uncovers OpenSSH Vulnerabilities CVE‑2025‑26465 & CVE‑2025‑26466 | Qualys
Qualys' Threat Research Unit identified two OpenSSH vulnerabilities: CVE-2025-26465, an active machine-in-the-middle attack on the client when VerifyHostKeyDNS is enabled (introduced December 2014, before OpenSSH 6.8p1), and CVE-2025-26466, a...