PT-2026-102808

Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.63.0 Description The hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid mlkem.rs accepts an all-zero 32-byte peer X25519 public key within the server dh and compute shared secret functions. This allow...

Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments

Update 08/12/2025: CISA has updated this alert to provide clarification on identifying Exchange Servers on an organization’s networks and provided further guidance on running the Microsoft Exchange Health Checker. Update 08/07/2025: CISA issued Emergency Directive ED 25-02: Mitigate Microsoft...