Vulnerabilities

Vulnerabilities

OpenSSH SSHole Flaw Is Under Active Attack as CISA Adds It to Its Exploited List

A high severity OpenSSH flaw nicknamed SSHole, rated 8.1 out of 10, is being exploited in the wild just days after a fix shipped. According to SecurityWeek, it affects the OpenSSH server on Linux systems that use the musl C library with PAM disabled, which includes the default setup

Vulnerabilities

SonicWall Flaw Lets Attackers Slip Past SAML Multifactor Checks on VPN Logins

According to the Cloud Security Alliance, SonicWall published an advisory on November 6 covering seven SonicOS vulnerabilities, and one of them is already under suspected exploitation. The flaw lets a user who holds valid credentials for a login method other than SAML get around SAML controls on the SSL VPN,

Vulnerabilities

Zyxel Switch Zero Day Slipped Past an Earlier Patch, Researchers Say

Binarly says a flaw in the web management interface of ten Zyxel GS1900 switch models allows unauthenticated command execution, and that a patch issued in June did not stop the exploit. Zyxel disclosed the issue on November 3 and rates it 8.8 out of 10, while Binarly rates it