[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fu3XZdc1oeBalUM4JVrEoYq0zy3SHCLZm3bqh8QJASt4":3,"g5a-risk:CVE-2025-26465":266},{"success":4,"data":5,"meta":263},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":27,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":77,"references":78,"referencesCount":176,"weaknesses":177,"weaknessesCount":186,"isActivelyExploited":187,"cisaInfo":27,"otxData":27,"relatedBlogPosts":188,"seoMetadata":189,"configurations":214,"relatedVendorCves":247,"notableEvents":248},"CVE-2025-26465","What is CVE-2025-26465?","A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.","A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impe...","2025-02-18T19:15:29.23","2025-11-03T22:18:41.727",6.8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","NONE","REQUIRED","UNCHANGED","MEDIUM",null,1.6,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[],0.07723,[36,36,36,36,36,36,36],"Medium",[40,45,48,51,56,60,65,70,73],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"openbsd","openssh","*","cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":46,"criteria":47,"vulnerable":4},"6.8","cpe:2.3:a:openbsd:openssh:6.8:p1:*:*:*:*:*:*",{"vendor":41,"product":42,"version":49,"criteria":50,"vulnerable":4},"9.9","cpe:2.3:a:openbsd:openssh:9.9:-:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"netapp","active_iq_unified_manager","-","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",{"vendor":52,"product":57,"version":58,"criteria":59,"vulnerable":4},"ontap","9","cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"redhat","openshift_container_platform","4.0","cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":68,"criteria":69,"vulnerable":4},"debian","debian_linux","11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":71,"criteria":72,"vulnerable":4},"12.0","cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",{"vendor":61,"product":74,"version":75,"criteria":76,"vulnerable":4},"enterprise_linux","9.0","cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",9,[79,83,86,89,92,96,99,103,108,111,114,117,121,125,130,134,138,141,145,149,154,158,161,166,170,174],{"url":80,"source":81,"tags":82},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:16823","Red Hat",[],{"url":84,"source":81,"tags":85},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:3837",[],{"url":87,"source":81,"tags":88},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:6993",[],{"url":90,"source":81,"tags":91},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2025:8385",[],{"url":93,"source":81,"tags":94},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-26465",[95],"Third Party Advisory",{"url":97,"source":81,"tags":98},"https:\u002F\u002Faccess.redhat.com\u002Fsolutions\u002F7109879",[],{"url":100,"source":81,"tags":101},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2344780",[102,95],"Issue Tracking",{"url":104,"source":105,"tags":106},"https:\u002F\u002Fseclists.org\u002Foss-sec\u002F2025\u002Fq1\u002F144","Seclists",[107,95],"Mailing List",{"url":109,"source":105,"tags":110},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FFeb\u002F18",[],{"url":112,"source":105,"tags":113},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FMay\u002F7",[],{"url":115,"source":105,"tags":116},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FMay\u002F8",[],{"url":118,"source":119,"tags":120},"https:\u002F\u002Fblog.qualys.com\u002Fvulnerabilities-threat-research\u002F2025\u002F02\u002F18\u002Fqualys-tru-discovers-two-vulnerabilities-in-openssh-cve-2025-26465-cve-2025-26466","Qualys",[95],{"url":122,"source":123,"tags":124},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1237040","Suse",[102],{"url":126,"source":127,"tags":128},"https:\u002F\u002Fftp.openbsd.org\u002Fpub\u002FOpenBSD\u002Fpatches\u002F7.6\u002Fcommon\u002F008_ssh.patch.sig","Openbsd",[129],"Patch",{"url":131,"source":132,"tags":133},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00020.html","Debian",[95],{"url":135,"source":136,"tags":137},"https:\u002F\u002Flists.mindrot.org\u002Fpipermail\u002Fopenssh-unix-announce\u002F2025-February\u002F000161.html","Mindrot",[95],{"url":139,"source":132,"tags":140},"https:\u002F\u002Fsecurity-tracker.debian.org\u002Ftracker\u002FCVE-2025-26465",[95],{"url":142,"source":143,"tags":144},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250228-0003\u002F","Netapp",[95],{"url":146,"source":147,"tags":148},"https:\u002F\u002Fubuntu.com\u002Fsecurity\u002FCVE-2025-26465","Ubuntu",[95],{"url":150,"source":151,"tags":152},"https:\u002F\u002Fwww.openssh.com\u002Freleasenotes.html#9.9p2","Openssh",[153],"Release Notes",{"url":155,"source":156,"tags":157},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F02\u002F18\u002F1","Openwall",[107,95],{"url":159,"source":156,"tags":160},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F02\u002F18\u002F4",[107,95],{"url":162,"source":163,"tags":164},"https:\u002F\u002Fwww.theregister.com\u002F2025\u002F02\u002F18\u002Fopenssh_vulnerabilities_mitm_dos\u002F","Theregister",[165],"Press\u002FMedia Coverage",{"url":167,"source":168,"tags":169},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2025-26465-detect-vulnerable-openssh","Vicarius",[95],{"url":171,"source":168,"tags":172},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2025-26465-mitigate-vulnerable-openssh",[173,95],"Mitigation",{"url":104,"source":105,"tags":175},[107,95],26,[178],{"id":179,"name":180,"description":181,"extendedDescription":182,"status":183,"abstraction":184,"structure":185},"CWE-390","Detection of Error Condition Without Action","The product detects a specific error, but takes no actions to handle the error.","","Draft","Base","Simple",1,false,[],{"title":190,"metaDescription":191,"keywords":192,"canonicalUrl":193,"structuredData":194},"What is CVE-2025-26465? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-26465, a medium severity cyber security vulnerability from 2025. A vulnerability was found in OpenSSH when the VerifyHostK...","CVE-2025-26465, CVE-2025-26465 vulnerability, CVE-2025-26465 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, openbsd security, netapp security, redhat security, debian security, openssh vulnerability, active_iq_unified_manager vulnerability, ontap vulnerability, openshift_container_platform vulnerability","\u002Fwhat-is\u002Fcve-2025-26465",{"@context":195,"@type":196,"headline":190,"description":191,"datePublished":10,"dateModified":11,"author":197,"publisher":201,"about":205,"mainEntityOfPage":209,"articleSection":212,"keywords":213},"https:\u002F\u002Fschema.org","TechArticle",{"@type":198,"name":199,"url":200},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":198,"name":199,"url":200,"logo":202},{"@type":203,"url":204},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":206,"name":6,"description":207,"additionalType":208},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":210,"@id":211},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-26465","Cybersecurity","CVE-2025-26465, CVE-2025-26465 vulnerability, CVE-2025-26465 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[215,231],{"Operator":27,"Negate":27,"Nodes":216},[217],{"Operator":218,"Negate":187,"CPEMatch":219},"OR",[220,224,226,228],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":221,"VersionStartExcluding":27,"VersionStartIncluding":222,"VersionEndExcluding":27,"VersionEndIncluding":223},"AD9E4318-20E3-420F-8EF5-7C05C3386586","6.9","9.8",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":225,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"50836FA3-8116-4D58-B73E-B4830FB3A551",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":227,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E2B53BBB-6916-478C-A896-77C7F7E7D5DE",{"Vulnerable":4,"Criteria":229,"MatchCriteriaID":230,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:openbsd:openssh:9.9:p1:*:*:*:*:*:*","F7A2B794-BA83-4A01-BD2E-541F18CB9E37",{"Operator":27,"Negate":27,"Nodes":232},[233],{"Operator":218,"Negate":187,"CPEMatch":234},[235,237,239,241,243,245],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":236,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":238,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A20333EE-4C13-426E-8B54-D78679D5DDB8",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":240,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"932D137F-528B-4526-9A89-CD59FA1AB0FE",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":242,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":244,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"46D69DCC-AE4D-4EA5-861C-D60951444C6C",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":246,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7F6FB57C-2BC7-487C-96DD-132683AEB35D",[],[249,256],{"id":250,"eventType":251,"eventTime":252,"details":253,"label":254,"color":255},"1aac8bfa-d850-4a9b-9838-a5b719870f44","LOW_EPSS_DELTA","2025-07-02T04:10:14.687161+00:00","Daily EPSS score decreased by 0.130 on 2025-02-20","EPSS Score Decreased","green",{"id":257,"eventType":258,"eventTime":259,"details":260,"label":261,"color":262},"4666216b-1084-43d8-b1aa-799f481638e5","HIGH_EPSS_DELTA","2025-07-05T04:04:08.667994+00:00","Daily EPSS score increased by 0.130 on 2025-02-20","EPSS Score Increased","red",{"lastModified":11,"cacheTime":264,"version":265},1792372637240,"2.0",{"score":267,"band":38,"action":268,"scoredAt":269},48,"Plan remediation","2026-10-16T07:05:56.212969+00:00"]