Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as soon a...

CVE-2026-94423

Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host ke

来源摘录 · NVD

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync buil...

CVE-2026-94140

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes St

来源摘录 · NVD

Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts

CVE-2026-94423

Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host ke

历史摘要 · 未重新核验 · OSV.dev

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no

CVE-2026-94140

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes St

历史摘要 · 未重新核验 · OSV.dev

The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, ...

CVE-2026-94135

The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH

历史摘要 · 未重新核验 · GitHub Advisory

The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless ...

CVE-2026-94134

The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `

历史摘要 · 未重新核验 · GitHub Advisory

Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A pre_share...

CVE-2026-89422

Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client c

历史摘要 · 未重新核验 · NVD

Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)

CVE-2026-11745

# Vulnerability Central Dogma's Git mirror SSH client installs an Apache MINA SSHD `ServerKeyVerifier` lambda that retu

历史摘要 · 未重新核验 · GitHub Advisory

AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

CVE-2026-18654

### Summary The AWS Command Line Interface (AWS CLI) is a unified tool to manage AWS services from the command line. An

历史摘要 · 未重新核验 · GitHub Advisory

Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers t...

CVE-2026-18654

Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v

历史摘要 · 未重新核验 · NVD

The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling SSH host-key verification. An attacker who can intercept t...

CVE-2026-58065

The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling S

历史摘要 · 未重新核验 · NVD

A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// c...

CVE-2026-11745

A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH

历史摘要 · 未重新核验 · NVD

goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request

### Summary The `--tunnel` / `-t` flag opens an outbound SSH connection to `localhost.run:22` with `HostKeyCallback: ss

历史摘要 · 未重新核验 · GitHub Advisory

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH ...

CVE-2026-44467

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side

历史摘要 · 未重新核验 · NVD