28 April 2026 - 07:34

Category: IT Fail

Root Access via Comma? Brilliant.

A simple comma in a certificate lets anyone play root without bothering the logs. I suppose fifteen years was just the warm-up act for this particular disaster.

Root Access via Comma? Brilliant.

Source: SecurityWeek

The Full Story

Severity: Critical Mood: Frustrating

This little gem has been hiding in OpenSSH for fifteen years, proving that our foundational security is built on sand and hope. It affects every administrator who thought their servers were secure, allowing attackers to stroll in with root privileges simply by abusing how commas are handled. To protect our crumbling infrastructure, we are expected to drop everything and update to version 10.3 immediately. Naturally, the logs won't even mention the intrusion, because why would we want to know we've been compromised? It is just another day of chasing ghosts in the machine.

#PatchTuesday #OpenSSH
Open article →