agentprime: CWE-322

CVE-2026-94423: Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts

Wed, 21 Oct 2026 21:22:48 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94140: Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no

Wed, 21 Oct 2026 21:22:19 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94135: Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default

Thu, 15 Oct 2026 21:40:24 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94134: Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default

Thu, 15 Oct 2026 21:39:03 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107675: FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol

Thu, 08 Oct 2026 15:28:41 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77703: SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine

Thu, 24 Sep 2026 14:38:52 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-89422: TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension

Tue, 22 Sep 2026 08:49:16 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)

Fri, 11 Sep 2026 20:45:50 GMT

com.linecorp.centraldogma:centraldogma-server-mirror-git <0.84.0, fixed in 0.84.0. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

Thu, 06 Aug 2026 20:15:30 GMT

awscli <1.45.28, fixed in 1.45.28. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-58065: Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification

Mon, 13 Jul 2026 15:00:49 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path network att...

Mon, 25 May 2026 10:16:15 GMT

apache-airflow-providers-google <22.0.0, fixed in 22.0.0. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request

Fri, 15 May 2026 17:17:38 GMT

goshs.de/goshs/v2 <2.0.7, fixed in 2.0.7. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-44467: Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions

Wed, 13 May 2026 15:40:42 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-1354: Zero Motorcycles Firmware Key Exchange without Entity Authentication

Tue, 21 Apr 2026 21:43:53 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-13914: Apstra: SSH host key validation vulnerability for managed devices

Thu, 09 Apr 2026 21:32:14 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-33697: CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

Thu, 26 Mar 2026 23:34:53 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: Keylime Missing Authentication for Critical Function and Improper Authentication

Fri, 06 Feb 2026 21:30:49 GMT

keylime >=7.12.0, <7.12.2 || >=7.13.0, <7.13.1, fixed in 7.12.2, 7.13.1. CVSS 9.4 (Critical). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows...

Fri, 06 Feb 2026 20:16:09 GMT

keylime <7.12.0, fixed in 7.12.0. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-62501: SSH Hostkey Misconfiguration Vulnerability in Archer Devices

Tue, 03 Feb 2026 18:52:54 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-10966: missing SFTP host verification with wolfSSH

Fri, 07 Nov 2025 07:26:30 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-54422: Sandboxie exposes encrypted sandbox key during password change

Tue, 29 Jul 2025 12:47:50 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-20163: Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability

Wed, 04 Jun 2025 16:17:44 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-47519: Backup uploads to ETM subject to man-in-the-middle interception

Fri, 10 Jan 2025 21:56:54 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-7516: Brocade Fabric OS before 9.2.2 does not enforce strict host key checking

Tue, 12 Nov 2024 18:41:54 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-6572: Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'

Mon, 09 Sep 2024 09:39:17 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-4871: Foreman: host ssh key not being checked in remote execution

Tue, 14 May 2024 14:27:41 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

Fri, 30 Sep 2022 22:56:17 GMT

matrix-nio <0.20, fixed in 0.20. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

matrix-sdk-crypto contains potential impersonation via room key forward responses

Fri, 30 Sep 2022 22:51:57 GMT

matrix-sdk-crypto <0.6.0, fixed in 0.6.0. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification

Fri, 30 Sep 2022 22:46:50 GMT

matrix-js-sdk <19.7.0, fixed in 19.7.0. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion

Fri, 30 Sep 2022 04:37:39 GMT

org.matrix.android:matrix-android-sdk2 <1.5.1, fixed in 1.5.1. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions

Fri, 30 Sep 2022 04:33:00 GMT

org.matrix.android:matrix-android-sdk2 <1.5.1, fixed in 1.5.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

matrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusion

Fri, 30 Sep 2022 00:41:24 GMT

matrix-js-sdk <19.7.0, fixed in 19.7.0. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

matrix-js-sdk subject to impersonated messages due to permissive key forwarding

Fri, 30 Sep 2022 00:40:35 GMT

matrix-js-sdk <19.7.0, fixed in 19.7.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-39257: Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions

Wed, 28 Sep 2022 20:55:10 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-39255: Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion

Wed, 28 Sep 2022 20:35:10 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

Jenkins Git client plugin 3.11.0 does not perform SSH host key verification

Thu, 28 Jul 2022 00:00:43 GMT

org.jenkins-ci.plugins:git-client <3.11.1, fixed in 3.11.1. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-34433: The Eclipse Foundation Eclipse Californium: In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3…

Fri, 20 Aug 2021 17:10:10 GMT

Published by the CVE Program. Not analysed by agentprime yet.