CVE-2026-48108

Russh is a Rust SSH client & server library. From version 0.34.0-beta.1 to before version 0.61.0, russh did not enforce the SSH identification-string rules as deliberately as OpenSSH. In particular, the server-side identification reader used the same permissive path as the client, allowing...

CVE-2026-48108

creationtimestamp| type| source ---|---|--- 2026-05-20 22:49:00+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-76r6-x97p-67vr 2026-06-10 23:07:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxtc4l7o72r...