CVE-2025-26466

🗓️ 04 Oct 2026 19:00:56Reported by KitPloitType

kitploit🔗 kitploit.com👁 15 Views

Unbounded DoS in OpenSSH p1 via repeated ping during key exchange without completing KEX.

Reporter	Title	Published	Views	Family All 97
zdt	OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle Vulnerability	18 Feb 202500:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM i is affected by a timing attack, handling signals in an unsafe manner, and uncontrolled memory consumption due to vulnerabilities in OpenSSH [CVE-2024-39894, CVE-2024-6387, CVE-2025-26466].	7 Aug 202515:48	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service (CVE-2025-26466) and a machine-in-the-middle attack (CVE-2025-26465) due to OpenSSH	17 Mar 202522:11	–	ibm
GithubExploit	Exploit for Allocation of Resources Without Limits or Throttling in Openbsd Openssh	23 Jun 202513:00	–	githubexploit
GithubExploit	Exploit for Allocation of Resources Without Limits or Throttling in Openbsd Openssh	2 Apr 202613:32	–	githubexploit
GithubExploit	Exploit for Allocation of Resources Without Limits or Throttling in Openbsd Openssh	29 Jul 202617:45	–	githubexploit
FreeBSD	FreeBSD -- Multiple vulnerabilities in OpenSSH	21 Feb 202500:00	–	freebsd
attackerkb	CVE-2025-26466	28 Feb 202522:15	–	attackerkb
AlpineLinux	CVE-2025-26466	28 Feb 202521:25	–	alpinelinux
Apple	About the security content of macOS Sonoma 14.7.6	12 May 202500:00	–	apple

04 Oct 2026 19:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.9

EPSS0.39845

SSVC

OpenSSH p1 denial of service unbounded queue key exchange ping flood