6535 matches found
CVE-2026-56624
Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or...
EUVD-2026-46103
Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or...
CVE-2026-56624
The vulnerability CVE-2026-56624 affects Apache MINA SSHD (server-side) where OpenSSH user certificates with unsupported options, specifically force-command and verify-required, were not validated during authentication. The issue allows a user with such a certificate to potentially run commands b...
CVE-2026-56624 Apache MINA SSHD: SSH certificate options lack validations
Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or...
CentOS 9 : openssh-9.9p1-10.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the openssh-9.9p1-10.el9 build changelog. - Fix use-after-free in cached hostkey during key re-exchange CVE-2026-60002 - Fix remote glob result of .. causing files to be placed in...
Critical Photon OS Security Update - PHSA-2026-5.0-0926
Updates of 'linux', 'openssh', 'linux-esx' packages of Photon OS have been released...
Fedora 43 : openssh (2026-169fd93089)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-169fd93089 advisory. - CVE-2026-59996: Fix remote glob result of .. causing files to be placed in unintended parent directories when scp performs remote-to-remote copy v...
[SECURITY] Fedora 44 Update: openssh-10.2p1-13.fc44
SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...
Fedora 44 : openssh (2026-c9d8542bb3)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c9d8542bb3 advisory. - CVE-2026-59996: Fix remote glob result of .. causing files to be placed in unintended parent directories when scp performs remote-to-remote copy v...
ROOT-OS-DEBIAN-11-CVE-2023-51767 CVE-2023-51767 in rootio-openssh - Patched by Root
Root has patched CVE-2023-51767 in the rootio-openssh package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-60002 CVE-2026-60002 in rootio-openssh - Patched by Root
Root has patched CVE-2026-60002 in the rootio-openssh package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-60002 CVE-2026-60002 in rootio-openssh - Patched by Root
Root has patched CVE-2026-60002 in the rootio-openssh package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2018-15919 CVE-2018-15919 in rootio-openssh - Patched by Root
Root has patched CVE-2018-15919 in the rootio-openssh package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-60002 CVE-2026-60002 in rootio-openssh - Patched by Root
Root has patched CVE-2026-60002 in the rootio-openssh package for Root:Debian:13. Multiple fixed versions available...
Oracle Linux 10 : openssh (ELSA-2026-19069)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19069 advisory. - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenSSH vulnerabilities (USN-8533-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8533-1 advisory. It was discovered that OpenSSH sftp did not properly constrain the location of downloaded files when connecting to an...
EulerOS 2.0 SP10 : openssh (EulerOS-SA-2026-2664)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.CVE-2026-35388 In OpenSSH before 10.3, comman...
MAL-2026-10502 Malicious code in gamified-trading-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24facab67c0c7bd4775a6081ee54f4fab3fa7a5dd93b52a87f1111088e5e501 The package advertises itself as a trading-gamification library XP, leaderboards, updateProgress/getLeaderboard but its source contains none of those...
MAL-2026-10427 Malicious code in svg-fetcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542aa371fe6b513dabed7c4f9b5646a104520afa686c6b33abedc21d120ea25f index.js exports getPlugin, which fetches JSON from the hardcoded endpoint https://svganchordev.net/icons/106 and passes the response field...
