What happened
Unauthenticated RCE in OpenSSH 8.5p1-9.8p1 on Linux granting root access (regreSSHion).
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusUnauthenticated RCE in OpenSSH 8.5p1-9.8p1 on Linux granting root access (regreSSHion).KitPloit2026-10-02T07:38:48Candidatekitploit.comUnauthenticated RCE in OpenSSH 8.5p1-9.8p1 on Linux granting root access (regreSSHion).ja2026-10-02T07:38:48CandidatePoC-in-GitHub · bigb0x/CVE-2024-6387Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2006-5051 , CVE-2008-4109 and others.★ 35bigb0x2024-07-01CandidatePoC-in-GitHub · sardine-web/CVE-2024-6387_CheckA security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead to sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.★ 0sardine-web2024-07-04CandidatePoC-in-GitHub · anhvutuan/CVE-2024-6387-poc-1CVE-2024-6387, also known as RegreSSHion, is a high-severity vulnerability found in OpenSSH servers (sshd) running on glibc-based Linux systems. It is a regression of a previously fixed vulnerability (CVE-2006-5051), which means the issue was reintroduced in newer versions of OpenSSH.★ 2anhvutuan2024-10-22CandidateSource timeline
Discovered through SploitusView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.