uncoordinated disclosure // pending
ssh2shell
--
days
:
--
hrs
:
--
min
:
--
sec
full disclosure → 2026-12-25 00:00:00 UTC
ID a name is all we need NAME ssh2shell SEVERITY CRITICAL // CVSS 10.0 VECTOR AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CLASS pre-auth heap corruption in → remote shell AFFECTED every version since 20xx EXPOSURE port 22/tcp — you already know how many. STATUS merry xmas. haha PROOF sha256(advisory) =