Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

14384 matches found

osv_debian
osv_debian•added 2026/09/30 10:17 a.m.•14 views

DEBIAN-CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/30 10:17 a.m.•16 views

CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS0.00382EPSS
SaveExploits0References2
NVD
NVD•added 2026/09/30 10:17 a.m.•15 views

CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS0.00377EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu•added 2026/09/30 10:17 a.m.•14 views

UBUNTU-CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS5.6AI score0.00382EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu•added 2026/09/30 10:17 a.m.•10 views

UBUNTU-CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References3
Mend
Mend•added 2026/09/30 9:43 a.m.•9 views

CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.3CVSS5.7AI score0.00377EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv•added 2026/09/30 9:43 a.m.•1 views

io.github.gitbucket:gitbucket_2.13 (>=4.37.0, <=4.48.0), org.apache.sshd:apache-sshd (>=2.2.0, <=2.19.0) +2 more potentially affected by CVE-2026-94053 via org.apache.sshd:sshd-ldap (>=2.2.0, <=2.19.0)

org.apache.sshd:sshd-ldap MAVEN version =2.2.0, =4.37.0, =2.2.0, =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-94053 Source advisory: MEND:CVE-2026-94053...

9.1CVSS5.8AI score0.00377EPSS
SaveExploits0
CVE
CVE•added 2026/09/30 9:43 a.m.•26 views

CVE-2026-94053

The Apache MINA SSHD Java library is vulnerable to an authentication bypass via LDAP injection within the optional sshd-ldap component. The root cause is a lack of proper escaping for LDAP filter metacharacters, which allows an attacker to successfully authenticate using the username "" and passw...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/09/30 9:43 a.m.•51 views

CVE-2026-94053 Apache MINA SSHD: LDAP injection in sshd-ldap

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS0.00377EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/30 9:43 a.m.•13 views

CVE-2026-94053 Apache MINA SSHD: LDAP injection in sshd-ldap

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/30 9:43 a.m.•16 views

EUVD-2026-89757

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References1
Debian CVE
Debian CVE•added 2026/09/30 9:43 a.m.•18 views

CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0
Vulnrichment
Vulnrichment•added 2026/09/30 9:34 a.m.•7 views

CVE-2026-94052 Apache MINA SSHD: LDAP password authentication ineffective

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS5.6AI score0.00382EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/30 9:34 a.m.•15 views

EUVD-2026-89730

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS5.6AI score0.00382EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/30 9:34 a.m.•50 views

CVE-2026-94052 Apache MINA SSHD: LDAP password authentication ineffective

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS0.00382EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/30 9:34 a.m.•43 views

CVE-2026-94052

The Apache MINA SSHD Java library (versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 ) contains a vulnerability in the optional sshd-ldap component. A missing check in the LdapPasswordAuthenticator allows attackers to bypass authentication checks when the component is configured for LDAP password...

9.1CVSS5.6AI score0.00382EPSS
SaveExploits0References2
Debian CVE
Debian CVE•added 2026/09/30 9:34 a.m.•18 views

CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS5.6AI score0.00382EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/30 12:00 a.m.•8 views

CVE-2026-94053: Improper Neutralization of Special Elements used in an LDAP Query

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/09/30 12:00 a.m.•8 views

PT-2026-103111

Name of the Vulnerable Software and Affected Versions Apache MINA SSHD versions 1.2.0 through 2.19.0 Apache MINA SSHD versions 3.0.0-M1 through 3.0.0-M5 Description An authentication bypass exists in the optional sshd-ldap component, which integrates password and public key authentication with an...

9.1CVSS5.8AI score0.00377EPSS
SaveExploits0References31
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/30 12:00 a.m.•7 views

CVE-2026-94052: Missing Critical Step in Authentication

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS5.7AI score0.00382EPSS
SaveExploits0References2
Rows per page
Query Builder