Apr 27, 2026mediumzero-day

OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 Years

A code reuse issue enabled comma characters in certificate principals to be interpreted as list separators.

what's affectedcertificate principals to be interpreted as list separators

mitigation statusMonitoring updates

first reportedApr 27, 2026

mentions (24h)367

velocitytrend up

mentions delta-7% vs yesterday

platform splitX 60% · Reddit 34% · GitHub 8%

keywords

zero-dayvulnerabilitymitigation

x analyticsheat 0

authors 0verified 0%

likes0

retweets0

replies0

quotes0

summaryConversation is accelerating with active-response chatter and exploit validation.

Curated Apr 27, 2026 by the ahackaday team./Sources verified./Brief grounded in 1 source.

Grace Your AI security internreadyGrace is ready

Grounded in this brief only — OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 Years. Press ⌘K any time.

You're answering aschange anytime

Pick a playor type your own ↓

Tone

Pick a play above, or type your question

Generate an answer and Grace will return a grounded response for this incident.

scanning advisory feeds…