{"uuid": "17f7997d-dcad-4d16-a6f4-6a8c54c049dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26466", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/468", "content": "CVE-2025-26466\n\nA flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.", "creation_timestamp": "2026-08-28T00:00:38.413616Z"}