THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-55653 (MEDIUM 4.3) — A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker

[NVD] CVE-2026-55653 (MEDIUM 4.3) — A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker

lownvdPublished 2026-06-23

CVE-2026-55653 CVSS: 4.3 MEDIUM Published: 2026-06-23T04:17:36.600

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful expl

Indicators of compromise

CVE-2026-55653cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-55653