Skip to content
Hermes Codex

OpenSSH — Security Intelligence & Vulnerability Profile

1. Software Identity & Security Posture

Section titled “1. Software Identity & Security Posture”
ParameterTechnical Specification
Official NameOpenSSH
Vendor / Projectopenssh
Canonical IDopenssh:openssh
Versioning Schemegeneric
CPE Identifierscpe:2.3:a:openssh:openssh:*:*:*:*:*:*:*:*
Overall PostureHIGH
Recommended Safe Release10.3p1

Documented CVEs

3 vulnerabilities cataloged in the Hermes intelligence repository.

CISA KEV Entries

0 flaws with confirmed active in-the-wild exploitation.

Weaponized Exploits

3 vulnerabilities with publicly available PoCs or weaponized exploit tooling.

Remediation Target

Recommended upgrade to 10.3p1 to neutralize known flaws.

2. 30-Day Risk Trajectory & Trend Evolution

Section titled “2. 30-Day Risk Trajectory & Trend Evolution”

Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:

Current HTS Score

0 / 100

= Stable over 30d

Max EPSS (Exploitation)

99.5 %

= Stable over 30d

CISA KEV Activity

0

No active KEV

HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10
2026-09-10: CVE: CVE-2026-55653

3. Vulnerability History & Version Applicability Matrix

Section titled “3. Vulnerability History & Version Applicability Matrix”
CVECVSS ScoreEPSS ProbabilityCISA KEVAffected VersionsFixed InHermes Analysis
CVE-2024-63878.1 (HIGH)99.5%No< v9.8p19.8p1-
CVE-2026-353857.5 (HIGH)0.6%No< v10.3p110.3p1Analysis →
CVE-2026-556534.3 (MEDIUM)0.3%No< v10.3p110.3p1Analysis →

4. Evaluate Running Versions in Interactive Workbench

Section titled “4. Evaluate Running Versions in Interactive Workbench”

Are you operating OpenSSH in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:

Launch Software Intelligence Workbench for OpenSSH Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.