embargo active
node: --
--:--:-- UTC
uncoordinated disclosure // pending

ssh2shell

--
days
:
--
hrs
:
--
min
:
--
sec
full disclosure → 2026-12-25 00:00:00 UTC
advisory.txt — sealed
ID         a name is all we need
NAME       ssh2shell
SEVERITY   CRITICAL  // CVSS 10.0
VECTOR     AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CLASS      pre-auth heap corruption in → remote shell
AFFECTED   every version since 20xx
EXPOSURE   port 22/tcp — you already know how many.
STATUS     merry xmas. haha
PROOF      sha256(advisory) =