CLEANSTART-2026-ML37851 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...

CVE-2026-39828 affects multiple packages. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. See reference...

CLEANSTART-2026-WU57451 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...

CVE-2026-39828 affects multiple packages. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. See reference...

CLEANSTART-2026-CG56781 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...

Security vulnerability affects the loki package. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded...

org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation

A flaw was found in Apache MINA SSHD server-side. During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could...

BASM (Broken Authentication & Session Management) org.apache.sshd:sshd-core Dependency in Crucible Server

This High severity BASM Broken Authentication & Session Management vulnerability was introduced in version 4.9.7 of Crucible Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.3 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N allow...

org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation

A flaw was found in Apache MINA SSHD server-side. During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could...

CVE-2026-56624

A flaw was found in Apache MINA SSHD server-side. During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could...

SUSE CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

Linux Distros Unpatched Vulnerability : CVE-2026-56624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH use...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

DEBIAN-CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

UBUNTU-CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-66141

Affected software : Exim before 4.99.5. Vulnerability : .forward privilege escalation due to mishandling of force_command for a pipe transport. Root cause : improper handling of force_command in a pipe transport within Exim, enabling a local attacker to escalate privileges. Impact : high severity...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

EUVD-2026-48479

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

PT-2026-64235

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.99.5 Description An issue exists where the force command for a pipe transport is mishandled, allowing for privilege escalation via .forward. Recommendations Update to version 4.99.5 or later...

SUSE CVE-2026-56624

Improper certificate validation in Apache MINA SSHD server-side. Apache MINA SSHD is a Java library for client-side and server-side SSH. Server-side OpenSSH user certificate validation during user authentication in an Apache MINA SSHD server did not check for the unsupported force-command or...