EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-3279)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-3354)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

NewStart CGSL MAIN 7.02 : libssh2 Multiple Vulnerabilities (NS-SA-2026-0094)

The remote NewStart CGSL host, running version MAIN 7.02, has libssh2 packages installed that are affected by multiple vulnerabilities: - A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such...

BrowserBox v18.8.0

BrowserBox — Remote Browser Isolation A full remote browser. Clientless access. Native performance. Self-host on Windows, macOS or Linux, or create cloud browser sessions through the API. Start a 7-Day Paid Evaluation · Buy a Commercial License · Talk to Sales Website · Live Demo · Documentation ...

CVE-2026-80238

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Protection mechani...

Exploit for CVE-2026-67276

CVE-2026-67276 - MikroTrik SSH Authentication Bypass Exploit...

Crossing the Streams: SSH Plaintext Recovery Via a Common Compression Context in Multiplexed Channels

SSH is the standard protocol for secure remote administration of servers. At the transport layer, SSH uses the Binary Packet Protocol BPP for encrypted and authenticated communication. Above this, the SSH Connection Protocol multiplexes one or more logical channels over a single connection,...

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik allows a hacker to bypass security restrictions and gain read-only access to data.

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik is related to errors in verifying the cryptographic signature during the incorrect comparison of the RSA public key assigned to the user. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik allows a hacker to increase their privileges.

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik is related to changes in the user trust policy mask due to the introduction or modification of arguments. Exploiting this vulnerability can allow a malicious actor to increase their privileges remote...

ROS-20260907-73-0001

The vulnerability of the ssh2transportread function in the libssh2 library is related to buffer overflows due to integer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using specially created SSH packets...

cve-2025-32433_rce_exploit

Erlang/OTP SSH – CVE-2025-32433 Laboratorio TryHackMe ⚠️ Solo para uso educativo Este proyecto es estrictamente para aprendizaje y práctica en el laboratorio de la sala oficial de TryHackMe: https://tryhackme.com/room/erlangotpsshcve202532433 No uses esta herramienta contra sistemas que no poseas ...

Exploit for CVE-2026-67276

MikroTrick lab PoC — CVE-2026-67276 RouterOS SSH public-key a...

[SECURITY] [DLA 4773-1] libssh2 security update

Debian LTS Advisory DLA-4773-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias September 05, 2026 https://wiki.debian.org/LTS Package : libssh2 Version : 1.10.0-3+deb12u1 CVE ID : CVE-2025-15661 CVE-2026-7598 CVE-2026-58050 CVE-2026-58051 CVE-2026-66032...

CVE-2026-67279

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...

CVE-2026-86060

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS...

CVE-2026-67276

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

CVE-2026-86060 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS...

EUVD-2026-72029

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS...

CVE-2026-86060 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS...

CVE-2026-86060

MikroTik RouterOS contains an argument-handling flaw in the SSH login path. An unauthenticated attacker can supply a username beginning with a prohibited character to reach the RouterOS login helper and modify the trusted policy mask , achieving privilege escalation . The vulnerability is rated C...