CVE-2026-84694 Coolify before 4.2.0 Remote Code Execution via Environment Variable Key

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers...

CVE-2026-84694

Coolify versions before 4.2.0 are affected by a remote code execution vulnerability caused by improper escaping of environment variable key names in Docker commands executed over SSH on managed servers. An authenticated attacker can inject shell metacharacters into environment variable keys, allo...

CVE-2026-84694 Coolify before 4.2.0 Remote Code Execution via Environment Variable Key

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers...

PT-2026-86456

Name of the Vulnerable Software and Affected Versions RouterOS versions prior to 6.49.21 Long-term RouterOS versions prior to 7.23.4 Long-term RouterOS versions prior to 7.24.2 Stable Description An argument-handling flaw exists in the SSH login path. By using a username that begins with a...

PT-2026-86451

Name of the Vulnerable Software and Affected Versions RouterOS versions prior to 6.49.21 RouterOS versions prior to 7.23.4 RouterOS versions prior to 7.24.2 Description An issue exists in the SSH protocol implementation where the system fails to compare the complete RSA public key when matching a...

PT-2026-84573

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers...

CVE-2026-84694: Improper Neutralization of Special Elements used in an OS Command

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers...

PT-2026-84853

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A malicious peer can send crafted messages after a channel has been established to cause a deadlock of the entire connection. This occurs because the system...

CVE-2026-76658

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

CVE-2017-1000082

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:46+00:00| seen| https://t.me/hackingAttack/49649 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45702 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45721 2026-09-02 01:01:58+00:00| seen|...

CVE-2026-76658

A vulnerability in the SSH daemon of HPE Networking Fabric Composer allows an unauthenticated remote attacker to gain administrative access to affected hosts. Successful exploitation enables arbitrary command execution as a privileged user on the underlying operating system, leading to complete s...

CVE-2026-76658 Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

EUVD-2026-69476

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

libssh: libssh: denial of service via zero advertised channel packet size

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Security Bypass

Summary golang.org/x/crypto is used by IBM Storage Fusion Data Foundation, which could cause Security Bypass. CVE-2022-30636, CVE-2024-45337, CVE-2025-22869, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181. Vulnerability Details CVEID:CVE-2022-30636 DESCRIPTION: httpTokenCacheKey uses path.Base to...

CVE-2026-18654

A flaw was found in AWS CLI. This vulnerability, located in the Elastic MapReduce EMR Secure Shell SSH helper commands, involves a lack of entity authentication during key exchange. A remote attacker, positioned between the client and the EMR cluster, could exploit this to intercept SSH sessions...

CVE-2025-3243

🔐 CVE-2025-3243 SSH Checker Fast. Lean. No-BS. Python script for initial exposure check of the CVE-2025-3243 vulnerability related to the Erlang/OTP SSH client. This project was designed for quick triage , reduction of operational uncertainty , and attack surface validation in environments where...

cloudflared v2026.8.3

Cloudflare Tunnel client Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin e.g. a webserver. Cloudflare attracts client requests and sends them to...

ALSA-2026:62218 Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

CVE-2026-76658: Improper Authentication

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...