Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

33 matches found

SUSE Linux
SUSE Linux•added 2026/10/12 7:25 a.m.•10 views

Security update for apache-sshd

This update for apache-sshd fixes the following issues: CVE-2026-77185: Asynchronous authentication can bypass signature verification bsc1283357. CVE-2026-93994: Repeated-publickey policy bypass on server bsc1283352. CVE-2026-93995: Remote execution of JGit "archive -o=file.zip" can write file on...

8.1CVSS6.3AI score0.00505EPSS
SaveExploits0References32
osv_suse
osv_suse•added 2026/10/12 7:25 a.m.•20 views

SUSE-SU-2026:4622-1 Security update for apache-sshd

This update for apache-sshd fixes the following issues: - CVE-2026-77185: Asynchronous authentication can bypass signature verification bsc1283357. - CVE-2026-93994: Repeated-publickey policy bypass on server bsc1283352. - CVE-2026-93995: Remote execution of JGit 'archive -o=file.zip' can write...

9.1CVSS6.2AI score0.00505EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE•added 2026/09/30 3:02 p.m.•17 views

SUSE CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS5.6AI score0.00382EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE•added 2026/09/30 3:02 p.m.•17 views

SUSE CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE•added 2026/09/30 3:01 p.m.•17 views

CVE-2026-94052

A flaw was found in the sshd-ldap component of Apache MINA SSHD. Due to a missing verification check in the Lightweight Directory Access Protocol LDAP password authenticator LdapPasswordAuthenticator, user credentials are not properly validated. A remote, unauthenticated attacker can exploit this...

9.1CVSS5.8AI score0.00382EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE•added 2026/09/30 2:28 p.m.•19 views

CVE-2026-94053

A flaw was found in the sshd-ldap component of Apache MINA SSHD. This vulnerability allows an unauthenticated remote attacker to bypass authentication due to improper escaping of LDAP Lightweight Directory Access Protocol filter metacharacters during credential verification. By supplying speciall...

9.1CVSS5.9AI score0.00377EPSS
SaveExploits0References2
NVD
NVD•added 2026/09/30 10:17 a.m.•16 views

CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS0.00382EPSS
SaveExploits0References2
osv_debian
osv_debian•added 2026/09/30 10:17 a.m.•18 views

DEBIAN-CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS5.6AI score0.00382EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2026/09/30 10:17 a.m.•21 views

DEBIAN-CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/30 10:17 a.m.•17 views

CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS0.00377EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu•added 2026/09/30 10:17 a.m.•11 views

UBUNTU-CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu•added 2026/09/30 10:17 a.m.•15 views

UBUNTU-CVE-2026-94052

A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for...

9.1CVSS5.6AI score0.00382EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2026/09/30 9:43 a.m.•14 views

CVE-2026-94053 Apache MINA SSHD: LDAP injection in sshd-ldap

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References1
Mend
Mend•added 2026/09/30 9:43 a.m.•10 views

CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.3CVSS5.7AI score0.00377EPSS
SaveExploits0References3
EUVD
EUVD•added 2026/09/30 9:43 a.m.•18 views

EUVD-2026-89757

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv•added 2026/09/30 9:43 a.m.•3 views

io.github.gitbucket:gitbucket_2.13 (>=4.37.0, <=4.48.0), org.apache.sshd:apache-sshd (>=2.2.0, <=2.19.0) +2 more potentially affected by CVE-2026-94053 via org.apache.sshd:sshd-ldap (>=2.2.0, <=2.19.0)

org.apache.sshd:sshd-ldap MAVEN version =2.2.0, =4.37.0, =2.2.0, =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-94053 Source advisory: MEND:CVE-2026-94053...

9.1CVSS5.8AI score0.00377EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/09/30 9:43 a.m.•2 views

org.apache.sshd:apache-sshd (>=3.0.0-m1, <=3.0.0-m5) potentially affected by CVE-2026-94053 via org.apache.sshd:sshd-ldap (>=3.0.0-m1, <=3.0.0-m5)

org.apache.sshd:sshd-ldap MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m5 Source cves: CVE-2026-94053 Source advisory: MEND:CVE-2026-94053...

9.1CVSS5.8AI score0.00377EPSS
SaveExploits0
CVE
CVE•added 2026/09/30 9:43 a.m.•27 views

CVE-2026-94053

The Apache MINA SSHD Java library is vulnerable to an authentication bypass via LDAP injection within the optional sshd-ldap component. The root cause is a lack of proper escaping for LDAP filter metacharacters, which allows an attacker to successfully authenticate using the username "" and passw...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0References2
Debian CVE
Debian CVE•added 2026/09/30 9:43 a.m.•18 views

CVE-2026-94053

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS5.7AI score0.00377EPSS
SaveExploits0
Cvelist
Cvelist•added 2026/09/30 9:43 a.m.•53 views

CVE-2026-94053 Apache MINA SSHD: LDAP injection in sshd-ldap

Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support for integrating password and publickey...

9.1CVSS0.00377EPSS
SaveExploits0References1
Rows per page
Query Builder