1372 matches found
DEBIAN-CVE-2026-109786
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...
CVE-2026-109786
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...
CVE-2026-109786
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...
CVE-2026-109786
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...
EUVD-2026-98268
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...
CVE-2026-109786
The fail2ban software (versions 0.10.5 through 1.1.1 before commit ddd879d ) is vulnerable in its sshd filter (config/filter.d/sshd.conf). The filter incorrectly accepts an "on " suffix after the host address. Because OpenSSH logs usernames verbatim, a remote unauthenticated attacker can provide ...
CVE-2026-109786
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...
PT-2026-111209
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...
CVE-2026-109786: Improper Output Neutralization for Logs
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...
Security update for apache-sshd
This update for apache-sshd fixes the following issues: CVE-2026-77185: Asynchronous authentication can bypass signature verification bsc1283357. CVE-2026-93994: Repeated-publickey policy bypass on server bsc1283352. CVE-2026-93995: Remote execution of JGit "archive -o=file.zip" can write file on...
SUSE-SU-2026:4622-1 Security update for apache-sshd
This update for apache-sshd fixes the following issues: - CVE-2026-77185: Asynchronous authentication can bypass signature verification bsc1283357. - CVE-2026-93994: Repeated-publickey policy bypass on server bsc1283352. - CVE-2026-93995: Remote execution of JGit 'archive -o=file.zip' can write...
openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options
A flaw was found in sshd, the OpenSSH server daemon. When DisableForwarding=yes is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over PermitTunnel=yes. This allows a remote attacker to bypass intended security restrictions and establish a tunnel,...
openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay
A flaw was found in OpenSSH's SSH daemon sshd. A remote attacker could exploit this vulnerability by repeatedly attempting authentication. The flaw allows the attacker to bypass the intended minimum authentication delay, which can facilitate brute-force attacks. This makes it easier for an attack...
EulerOS 2.0 SP13 : openssh (EulerOS-SA-2026-4077)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.CVE-2026-60001 sshd in OpenSSH before 10.4 allows remote...
EulerOS 2.0 SP13 : openssh (EulerOS-SA-2026-4168)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.CVE-2026-60001 sshd in OpenSSH before 10.4 allows remote...
EulerOS 2.0 SP11 : openssh (EulerOS-SA-2026-4353)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line...
EulerOS 2.0 SP11 : openssh (EulerOS-SA-2026-4263)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line...
OpenSSH < 10.6 Multiple Vulnerabilities
The version of OpenSSH installed on the remote host is prior to 10.6. It is, therefore, affected by multiple vulnerabilities as referenced in the release-10.6 advisory. - In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. CVE-2026-106583 ...
CVE-2026-106555
A flaw was found in OpenSSH's SSH daemon sshd. When Generic Security Service Application Program Interface GSSAPI authentication is enabled, authentication state can improperly persist across separate authentication attempts. A local user could exploit this condition during sequential...
