Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

917 matches found

EUVD
EUVD•added 2026/09/30 9:38 a.m.•8 views

EUVD-2026-89755

Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though class GitPgmCommandFactory a way to configure an Apache MINA SSHD...

6.5CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/30 9:38 a.m.•34 views

CVE-2026-93995 Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server

Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though class GitPgmCommandFactory a way to configure an Apache MINA SSHD...

6.5CVSS0.00271EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/30 9:38 a.m.•12 views

CVE-2026-93995

Apache MINA SSHD versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 are vulnerable to improper input validation in the sshd-git component. The GitPgmCommandFactory class allows authenticated SSH clients to execute git commands via the JGit library. Specifically, the previous fix for CVE-2026-58624 wa...

6.5CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/30 9:38 a.m.•5 views

CVE-2026-93995 Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server

Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though class GitPgmCommandFactory a way to configure an Apache MINA SSHD...

6.5CVSS5.8AI score0.00271EPSS
SaveExploits0References1
Debian CVE
Debian CVE•added 2026/09/30 9:38 a.m.•8 views

CVE-2026-93995

Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though class GitPgmCommandFactory a way to configure an Apache MINA SSHD...

6.5CVSS5.8AI score0.00271EPSS
SaveExploits0
EUVD
EUVD•added 2026/09/30 9:37 a.m.•6 views

EUVD-2026-89754

Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD provides a Java implementation of SCP. The SCP command protocol ...

6.5CVSS5.6AI score0.00436EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/30 9:37 a.m.•13 views

CVE-2026-93996

The Apache MINA SSHD Java library (versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 ) is vulnerable to a memory exhaustion Denial of Service (DoS) in the sshd-scp component. The root cause is that the protocol handler fails to impose a limit on the length of LF-terminated lines during SCP command pr...

6.5CVSS5.6AI score0.00436EPSS
SaveExploits0References2
Debian CVE
Debian CVE•added 2026/09/30 9:37 a.m.•10 views

CVE-2026-93996

Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD provides a Java implementation of SCP. The SCP command protocol ...

6.5CVSS5.6AI score0.00436EPSS
SaveExploits0
Vulnrichment
Vulnrichment•added 2026/09/30 9:37 a.m.•4 views

CVE-2026-93996 Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read

Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD provides a Java implementation of SCP. The SCP command protocol ...

6.5CVSS5.6AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/30 9:37 a.m.•33 views

CVE-2026-93996 Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read

Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD provides a Java implementation of SCP. The SCP command protocol ...

6.5CVSS0.00436EPSS
SaveExploits0References1
Debian CVE
Debian CVE•added 2026/09/30 9:37 a.m.•9 views

CVE-2026-94002

Possible memory exhaustion in SFTP clients DefaultSftpClient in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp component provides support for SFTP. The SFTP client...

7.5CVSS5.6AI score0.00426EPSS
SaveExploits0
EUVD
EUVD•added 2026/09/30 9:37 a.m.•8 views

EUVD-2026-89753

Possible memory exhaustion in SFTP clients DefaultSftpClient in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp component provides support for SFTP. The SFTP client...

7.5CVSS5.6AI score0.00426EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/30 9:37 a.m.•13 views

CVE-2026-94002

The Apache MINA SSHD library (component sshd-sftp ) is vulnerable to memory exhaustion in the DefaultSftpClient implementation. The root cause is that the SFTP client fails to verify if a received reply corresponds to a previously sent request; consequently, unsolicited replies are stored indefin...

7.5CVSS5.6AI score0.00426EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/09/30 9:37 a.m.•4 views

CVE-2026-94002 Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies

Possible memory exhaustion in SFTP clients DefaultSftpClient in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp component provides support for SFTP. The SFTP client...

7.5CVSS5.6AI score0.00426EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/30 9:37 a.m.•33 views

CVE-2026-94002 Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies

Possible memory exhaustion in SFTP clients DefaultSftpClient in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp component provides support for SFTP. The SFTP client...

7.5CVSS0.00426EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/30 9:35 a.m.•15 views

CVE-2026-94029

The Apache MINA SSHD Java library (versions 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5) is vulnerable to server-side memory exhaustion within the sshd-sftp component. The issue occurs in the SFTP v6 check-file-name/check-file-handle extension when a user provides a very small block size (e.g., 256)...

6.5CVSS5.8AI score0.0038EPSS
SaveExploits0References2
Debian CVE
Debian CVE•added 2026/09/30 9:35 a.m.•8 views

CVE-2026-94029

Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name/check-file-handle extension. Apache MINA SSHD is a Java library for client-side and server-side SSH. Using a very small "block size" for instance 256,...

6.5CVSS5.8AI score0.0038EPSS
SaveExploits0
Vulnrichment
Vulnrichment•added 2026/09/30 9:35 a.m.•3 views

CVE-2026-94029 Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension

Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name/check-file-handle extension. Apache MINA SSHD is a Java library for client-side and server-side SSH. Using a very small "block size" for instance 256,...

6.5CVSS5.8AI score0.0038EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/30 9:35 a.m.•36 views

CVE-2026-94029 Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension

Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name/check-file-handle extension. Apache MINA SSHD is a Java library for client-side and server-side SSH. Using a very small "block size" for instance 256,...

6.5CVSS0.0038EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/30 9:35 a.m.•10 views

EUVD-2026-89731

Server-side memory exhaustion in Apache MINA SSHD 1.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, component sshd-sftp, in the SFTP v6 check-file-name/check-file-handle extension. Apache MINA SSHD is a Java library for client-side and server-side SSH. Using a very small "block size" for instance 256,...

6.5CVSS5.8AI score0.0038EPSS
SaveExploits0References1
Rows per page
Query Builder