CISA added an actively exploited vulnerability to its Known Exploited Vulnerabilities catalog on 2026-11-09. The entry concerns an OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability affecting OpenBSD OpenSSH on Linux, which could allow authentication bypass. CISA’s required action is to apply mitigations following vendor instructions, comply with CISA’s BOD 26-04 guidance on prioritizing security updates, and meet the agency’s Forensics Triage Requirements as noted in the catalog. 1