NetBSD

Part of the SSH-based OS identification family, but not the os-release group — NetBSD ships no os-release equivalent at all, so uname -sr is the identity source instead. See the family page for the shared mechanism, credentials, and host key verification.

targets:
  - id: netbsd-host
    product: netbsd
    address: host.example.com
    credentials: linux-host-ssh

Verified live via vmactions/netbsd-vm (no downloadable pre-installed image exists otherwise): uname -sr → "NetBSD 11.0", with no hostname in it at all — unlike uname -a, which this probe deliberately doesn’t use.

CVE correlation

Not matched — NVD records its patch levels in a CPE field the matcher doesn’t read, so matching on the release alone would flag a fully patched host with every CVE ever fixed in that release. See CVE correlation.

Lifecycle resolver

endoflife:netbsd.