Critical Zero-Day Vulnerability Discovered in OpenSSH – Patch Immediately

2 oceanstack 2 7/24/2025, 12:59:02 PM

A critical zero-day vulnerability (CVE-2025-38897) has been discovered in OpenSSH, affecting most Unix-based systems running versions 9.3 and earlier. The flaw allows unauthenticated remote code execution under specific conditions, posing a serious risk to public-facing servers. The exploit has already been seen in active use by threat actors.

Comments (2)

evanjrowley · 21h ago

>The flaw allows unauthenticated remote code execution under specific conditions

Are the conditions highly specific or are they the default configuration for most OpenSSH installations?

yourpaltod · 21h ago

Literally any other information on this? Right now this feels like AI-hallucination. Unpublished CVE (as of the time of this post), nothing actually useful to act on.

Ask HN: What is so good about MCP servers?

The missing analytics platform for landing pages. What do you think?

Tell HN: Online Safety Act to be enforced in the UK on July 25th

Ask HN: Help me navigate a PIP at a remote startup in the Netherlands

Ask HN: Why didn't people 40 years ago worry about population collapse today?

Ask HN: Why do Cursor, Windsurf and Claude Code dominate the conversation?

Remove All AI Features from Firefox

Mineral exploration startups are the tech startups of the physical world

Ask HN: How did you navigate an illegal termination?

Ask HN: Python developers at big companies what is your setup?

Ask HN: Why is Gmail so incompetent at basic search?

Ask HN: Is anybody using llama.cpp for production?

I'm Peter Roberts, immigration attorney who does work for YC and startups. AMA

Ask HN: Has anyone deployed LLMs to production?

Ask HN: How do you avoid AI slop on YouTube?

Ask HN: How many of you are working in tech without a STEM degree?

Ask HN: Any active COBOL devs here? What are you working on?

Google admits system failure but claims "technical impossibility" to fix it

Ask HN: What Speaker Diarization tools should I look into?

Ask HN: Copilot Makes Me Dumb

Ask HN: What's Your Useful Local LLM Stack?

MatrixTransformer: Structural Pattern Discovery Without Training

Ask HN: How to find non-popular blogs and forums?

Ask HN: What Pocket alternatives did you move to?

Most interesting job openings according to ChatGPT

Instant responsiveness in user interfaces is annoying

Critical Zero-Day Vulnerability Discovered in OpenSSH – Patch Immediately

Comments (2)