CVE-2024-6387 โ OpenSSH regreSSHion (race condition)
Signal handler race condition in OpenSSH sshd (regreSSHion) enabling unauthenticated remote code execution; added to KEV.
HIGH
CISA KEV
Severity & confidence
Source severityhigh
Platform severityhigh
Confidencemedium
Exploitationexploited in wild
CVSS8.1
Affected
VendorsLinux
ProductsOpenSSH
CountriesUSNZAUUKEU
Sectorstechnologycloudgovernment
Reporting sources (1)
NIST NVD
๐ฏ Why should I care?
- Affects a country you follow (New Zealand).
- On the CISA Known Exploited Vulnerabilities list.
Timeline & provenance
Published2026-08-15T20:07:49
Last updated2026-08-15T20:07:49
Ingested2026-08-18T20:07:49
FreshnessNEAR-REAL-TIME
Threat typevulnerability
MITRE ATT&CK
T1190
Recommended action
Upgrade OpenSSH to patched versions; restrict sshd exposure.
Next steps
- Identify affected systems in your environment.
- Apply the vendor patch or mitigation guidance.
- Review logs for indicators described in the advisory.
- Follow the affected vendor/product to track updates.
Confidence explanation
Reported by a single or secondary source; treat as indicative, verify before acting.
Source type: standards ยท Original: NIST NVD
