CVE-2026-102824

The Russh Rust SSH client and server library (prior to version 0.63.0 ) contains a vulnerability in the hybrid ML-KEM 768 and X25519 key exchange implementation. The root cause is a missing zero-point validation in russh/src/kex/hybrid_mlkem.rs, which allows the library to accept an all-zero 32-b...