Lucene search
K

554 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-paramiko (UTSA-2026-016596)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016596 advisory. In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure. Tenable h...

5.9CVSS6.6AI score0.00727EPSS
Exploits1References4
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в paramiko

In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized information disclosure...

5.9CVSS6.6AI score0.00727EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в paramiko, libssh, libssh2, erlang, openssh

The SSH transport protocol, with certain OpenSSH extensions, found in OpenSSH versions prior to 9.6 and other products, allows remote attackers to bypass integrity checks. As a result, some packets may be omitted from the extension negotiation message. Consequently, the client and server may end ...

5.9CVSS6.9AI score0.54214EPSS
Exploits3References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/18 5:24 p.m.9 views

Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the paramiko package

Summary Storage Virtualize Ansible Collection uses the paramiko package to provide common ssh capability. paramiko-4.0.0-py3-none-any.whl is vulnerable to CVE-2026-44405. Vulnerability Details CVEID:CVE-2026-44405 DESCRIPTION: In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1...

3.4CVSS5.8AI score0.00004EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-paramiko (UTSA-2026-017484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017484 advisory. Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attac...

8.8CVSS5.8AI score0.00905EPSS
Exploits0References4
Wolfi
Wolfi
added 2026/05/10 2:21 a.m.9 views

GHSA-R374-RXX8-8654 vulnerabilities

Vulnerabilities for packages: airflow, datadog-agent, py3-paramiko, superset...

5.8AI score
Exploits0
Wolfi
Wolfi
added 2026/05/10 2:21 a.m.10 views

CVE-2026-44405 vulnerabilities

Vulnerabilities for packages: airflow, datadog-agent, py3-paramiko, superset...

3.4CVSS5.8AI score0.00004EPSS
Exploits0
Chainguard
Chainguard
added 2026/05/10 1:17 a.m.7 views

GHSA-R374-RXX8-8654 vulnerabilities

Vulnerabilities for packages: duplicity, keep, datadog-agent, airflow, pgadmin4, py3-paramiko, keep-fips, nemo, datadog-agent-fips, superset...

5.8AI score
Exploits0
Chainguard
Chainguard
added 2026/05/10 1:17 a.m.7 views

CVE-2026-44405 vulnerabilities

Vulnerabilities for packages: duplicity, keep, datadog-agent, airflow, pgadmin4, py3-paramiko, keep-fips, nemo, datadog-agent-fips, superset...

3.4CVSS5.8AI score0.00004EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2026/05/07 2:16 a.m.5 views

SUSE CVE-2026-44405

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

3.4CVSS5.8AI score0.00004EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/05/06 5:53 a.m.5 views

CVE-2026-44405

A flaw was found in Paramiko, a Python implementation of the SSHv2 protocol. The rsakey.py module allows the use of the SHA-1 cryptographic hash algorithm, which is known to have security weaknesses. An attacker on the same local network, with significant effort, could potentially exploit this to...

3.4CVSS5.8AI score0.00004EPSS
Exploits0References5
vulnersOsv
vulnersOsv
added 2026/05/06 1:21 a.m.6 views

0lever-utils (>=0.0.2 <=0.0.7), a12rta (=0.1.0) +1627 more potentially affected by CVE-2026-44405 via paramiko (>=1.15.0 <=4.0.0)

paramiko PYPI version =1.15.0, =0.0.2, =1.0.1, =0.15.0, =0.2.0, =1.0.1, =0.5.0, =2026.2.3, =0.0.0, =0.1.1, =0.0.2, =0.2.0, =0.2.137 and more Source cves: CVE-2026-44405 Source advisory: SNYK:PYTHON-PARAMIKO-16425764...

3.4CVSS5.8AI score0.00004EPSS
Exploits0
Snyk
Snyk
added 2026/05/06 1:21 a.m.4 views

Use of a Broken or Risky Cryptographic Algorithm

Overview paramiko is a library for making SSH2 connections client or server. Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm in the RSA key handling by allowing the use of the SHA-1 algorithm. An attacker can compromise the integrity of...

4.7CVSS5.8AI score0.00004EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/06 12:31 a.m.8 views

EUVD-2026-27514

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

3.4CVSS5.8AI score0.00004EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/05/06 12:31 a.m.8 views

Paramiko rsakey.py allows the SHA-1 algorithm

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

3.4CVSS5.8AI score0.00004EPSS
Exploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2026/05/06 12:31 a.m.5 views

0lever-utils (>=0.0.2 <=0.0.7), a12rta (=0.1.0) +1627 more potentially affected by CVE-2026-44405 via paramiko (>=1.15.0 <=4.0.0)

paramiko PYPI version =1.15.0, =0.0.2, =1.0.1, =0.15.0, =0.2.0, =1.0.1, =0.5.0, =2026.2.3, =0.0.0, =0.1.1, =0.0.2, =0.2.0, =0.2.137 and more Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...

3.4CVSS5.8AI score0.00004EPSS
Exploits0
OSV
OSV
added 2026/05/06 12:31 a.m.4 views

GHSA-R374-RXX8-8654 Paramiko rsakey.py allows the SHA-1 algorithm

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

3.4CVSS5.8AI score0.00004EPSS
Exploits0References4
NVD
NVD
added 2026/05/06 12:16 a.m.6 views

CVE-2026-44405

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

3.4CVSS0.00004EPSS
Exploits0References2
OSV
OSV
added 2026/05/06 12:16 a.m.3 views

DEBIAN-CVE-2026-44405

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

3.4CVSS5.8AI score0.00004EPSS
Exploits0References1
OSV
OSV
added 2026/05/06 12:16 a.m.3 views

UBUNTU-CVE-2026-44405

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

3.4CVSS5.8AI score0.00004EPSS
Exploits0References2
Rows per page
Query Builder