CISA KEV Adds OpenSSH Auth Bypass and Three More Exploited Flaws, All Due Nov 12

CISA added four exploited vulnerabilities to its Known Exploited Vulnerabilities catalog on November 9, and every one of them carries the same federal remediation deadline of November 12. That is a three-day clock with a wrinkle: November 11 is Veterans Day, a federal holiday, so civilian agencies effectively lose a business day out of the window. The batch is worth reading for the stock, the insurer and the supply chain not because any single flaw is famous, but because the one with the broadest reach is the OpenSSH authentication bypass that ships inside most of the infrastructure the market prices.

Key takeaways Four CVEs entered the KEV catalog on November 9, all with a November 12 due da…