CVE-2026-86231

A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a manipulation of the argument knownhosts results in improper check for certificate revocation. The attack is possible to ...

CVE-2026-86231

mwiede jsch (a Java SSH library) versions up to 2.28.5 contain an improper certificate revocation check in the getRevokedKeys function of src/main/java/com/jcraft/jsch/KnownHosts.java. Manipulating the known_hosts argument allows a remote attacker to bypass revocation verification, resulting in l...

CVE-2026-86231 mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation

A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a manipulation of the argument knownhosts results in improper check for certificate revocation. The attack is possible to ...