‘RegreSSHion’ bug raises alarms but experts question chances of widespread exploitation

A remote unauthenticated RCE in OpenSSH server (CVE-2024-6387, “RegreSSHion”) was disclosed with a patch available; researchers warn it can enable full system takeover and persistence, and scans suggest many internet-facing instances may be potentially vulnerable, but experts say exploitation is complex, noisy, often targets older systems, PoC attempts have been unreliable, and no in-the-wild exploitation has been observed — organizations should prioritize updating publicly exposed OpenSSH instances.