GHSA-J7H2-66J4-GHJF A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request

Details In russh/src/server/encrypted.rs, serverreadauthrequestpk 0.63.3, around lines 880-990: The requested algorithm name pubkeyalgo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkeyalgo, &pubkeykey. The derived hashalg is then dropped...

A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request

Details In russh/src/server/encrypted.rs, serverreadauthrequestpk 0.63.3, around lines 880-990: The requested algorithm name pubkeyalgo is read and only used to decode the key: PublicKeyOrCertificate::decode&pubkeyalgo, &pubkeykey. The derived hashalg is then dropped...

CVE-2026-94053

The Apache MINA SSHD Java library is vulnerable to an authentication bypass via LDAP injection within the optional sshd-ldap component. The root cause is a lack of proper escaping for LDAP filter metacharacters, which allows an attacker to successfully authenticate using the username "" and passw...

ssh-publickey-acceptance NSE Script

This script takes a table of paths to private keys, passphrases, and usernames and checks each pair to see if the target ssh server accepts them for publickey authentication. If no keys are given or the known-bad option is given, the script will check if a list of known static public keys are...