Every CVESearch/Get API key

CVE-2026-77185

Apache MINA SSHD: Asynchronous authentication can bypass signature verification

9.1 CriticalFix available

CVE-2026-77185 is a critical vulnerability (CVSS 9.1) in Apache Software Foundation Mina Sshd, published September 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. Fixed in libmina-sshd-java 2.20.1-1.

Severity
9.1 CriticalCVSS 3.1, CVE List
Exploit chance
0.55%EPSS, 46th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.20.1-1libmina-sshd-java +139 more

Description

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server.

Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of the library, a mechanism to perform "asynchronous authentication" exists. A server implemented with Apache MINA SSHD must contain explicit code to make use of this feature. The implementation of this feature was flawed and could potentially lead to skipping checking the signature in public-key or hostbased authentication, or returning a wrong result.

Users are recommended to upgrade to Apache MINA SSHD 2.20.0 or 3.0.0-M6, which fix the logic error and which additionally forbid the use of this "asynchronous authentication" mechanism with the public-key or hostbased authentication schemes: if used, the SSH session will be closed and the server will log an entry indicating that asynchronous authentication may be used only with password or keyboard-interactive authentication.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.55%Up 0.1 points since Sep 30, 2026
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libmina-sshd-java
Debian:13
All versions, plus listed versions
2.13.2-22.13.2-32.19.0-12.20.1-1
None known
libmina-sshd-java
Debian:14
before 2.20.1-1, plus listed versions
2.13.2-22.13.2-32.19.0-1
2.20.1-1
maven3.9
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:3.9.16-0.3.hum1
0:3.9.16-0.3.hum1
maven3.9-lib
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
before 0:3.9.16-0.3.hum1
0:3.9.16-0.3.hum1
eap8-apache-sshd
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.20.0-1.redhat_00002.1.el10eap
0:2.20.0-1.redhat_00002.1.el10eap
eap8-bouncycastle
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el10eap
0:1.86.0-1.redhat_00001.1.el10eap
eap8-bouncycastle-jmail
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el10eap
0:1.86.0-1.redhat_00001.1.el10eap
eap8-bouncycastle-pg
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el10eap
0:1.86.0-1.redhat_00001.1.el10eap
eap8-bouncycastle-pkix
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el10eap
0:1.86.0-1.redhat_00001.1.el10eap
eap8-bouncycastle-prov
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el10eap
0:1.86.0-1.redhat_00001.1.el10eap
Show 130 moreShow less
Affected packages
PackageAffectedFixed
eap8-bouncycastle-util
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el10eap
0:1.86.0-1.redhat_00001.1.el10eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:801.9.1-1.GA_redhat_00002.1.el10eap
0:801.9.1-1.GA_redhat_00002.1.el10eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:801.9.1-1.GA_redhat_00002.1.el10eap
0:801.9.1-1.GA_redhat_00002.1.el10eap
eap8-ironjacamar
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el10eap
0:3.1.1-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el10eap
0:3.1.1-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el10eap
0:3.1.1-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el10eap
0:3.1.1-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el10eap
0:3.1.1-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el10eap
0:3.1.1-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el10eap
0:3.1.1-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el10eap
0:3.1.1-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el10eap
0:3.1.1-1.Final_redhat_00001.1.el10eap
eap8-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el10eap
0:2.18.11-1.redhat_00001.1.el10eap
eap8-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el10eap
0:2.18.11-1.redhat_00001.1.el10eap
eap8-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el10eap
0:2.18.11-1.redhat_00001.1.el10eap
eap8-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el10eap
0:2.18.11-1.redhat_00001.1.el10eap
eap8-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el10eap
0:2.18.11-1.redhat_00001.1.el10eap
eap8-jackson-module-jakarta-xmlbind-annotations
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el10eap
0:2.18.11-1.redhat_00001.1.el10eap
eap8-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el10eap
0:2.18.11-1.redhat_00001.1.el10eap
eap8-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el10eap
0:2.18.11-1.redhat_00001.1.el10eap
eap8-mod_cluster
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.1.1-1.Final_redhat_00001.1.el10eap
0:2.1.1-1.Final_redhat_00001.1.el10eap
eap8-neethi
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:3.2.4-1.redhat_00001.1.el10eap
0:3.2.4-1.redhat_00001.1.el10eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el10eap
0:8.1.9.1-1.GA_redhat_00006.1.el10eap
eap8-wildfly-http-client
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el10eap
0:2.1.5-1.Final_redhat_00001.1.el10eap
eap8-wildfly-http-client-common
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el10eap
0:2.1.5-1.Final_redhat_00001.1.el10eap
eap8-wildfly-http-ejb-client
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el10eap
0:2.1.5-1.Final_redhat_00001.1.el10eap
eap8-wildfly-http-naming-client
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el10eap
0:2.1.5-1.Final_redhat_00001.1.el10eap
eap8-wildfly-http-transaction-client
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el10eap
0:2.1.5-1.Final_redhat_00001.1.el10eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el10eap
0:8.1.9.1-1.GA_redhat_00006.1.el10eap
eap8-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:8.1.1-15.GA_redhat_00052.1.el10eap
0:8.1.1-15.GA_redhat_00052.1.el10eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el10eap
0:8.1.9.1-1.GA_redhat_00006.1.el10eap
eap8-ws-commons-XmlSchema
Red Hat:jboss_enterprise_application_platform:8.1::el10
From an advisory covering 21 CVEs
before 0:2.3.3-1.redhat_00001.1.el10eap
0:2.3.3-1.redhat_00001.1.el10eap
eap8-apache-sshd
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.20.0-1.redhat_00002.1.el8eap
0:2.20.0-1.redhat_00002.1.el8eap
eap8-bouncycastle
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el8eap
0:1.86.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-jmail
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el8eap
0:1.86.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-pg
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el8eap
0:1.86.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-pkix
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el8eap
0:1.86.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-prov
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el8eap
0:1.86.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-util
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el8eap
0:1.86.0-1.redhat_00001.1.el8eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:801.9.1-1.GA_redhat_00002.1.el8eap
0:801.9.1-1.GA_redhat_00002.1.el8eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:801.9.1-1.GA_redhat_00002.1.el8eap
0:801.9.1-1.GA_redhat_00002.1.el8eap
eap8-ironjacamar
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el8eap
0:3.1.1-1.Final_redhat_00001.1.el8eap
eap8-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el8eap
0:3.1.1-1.Final_redhat_00001.1.el8eap
eap8-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el8eap
0:3.1.1-1.Final_redhat_00001.1.el8eap
eap8-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el8eap
0:3.1.1-1.Final_redhat_00001.1.el8eap
eap8-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el8eap
0:3.1.1-1.Final_redhat_00001.1.el8eap
eap8-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el8eap
0:3.1.1-1.Final_redhat_00001.1.el8eap
eap8-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el8eap
0:3.1.1-1.Final_redhat_00001.1.el8eap
eap8-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el8eap
0:3.1.1-1.Final_redhat_00001.1.el8eap
eap8-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el8eap
0:3.1.1-1.Final_redhat_00001.1.el8eap
eap8-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el8eap
0:2.18.11-1.redhat_00001.1.el8eap
eap8-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el8eap
0:2.18.11-1.redhat_00001.1.el8eap
eap8-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el8eap
0:2.18.11-1.redhat_00001.1.el8eap
eap8-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el8eap
0:2.18.11-1.redhat_00001.1.el8eap
eap8-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el8eap
0:2.18.11-1.redhat_00001.1.el8eap
eap8-jackson-module-jakarta-xmlbind-annotations
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el8eap
0:2.18.11-1.redhat_00001.1.el8eap
eap8-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el8eap
0:2.18.11-1.redhat_00001.1.el8eap
eap8-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el8eap
0:2.18.11-1.redhat_00001.1.el8eap
eap8-mod_cluster
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.1.1-1.Final_redhat_00001.1.el8eap
0:2.1.1-1.Final_redhat_00001.1.el8eap
eap8-neethi
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:3.2.4-1.redhat_00001.1.el8eap
0:3.2.4-1.redhat_00001.1.el8eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el8eap
0:8.1.9.1-1.GA_redhat_00006.1.el8eap
eap8-wildfly-http-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el8eap
0:2.1.5-1.Final_redhat_00001.1.el8eap
eap8-wildfly-http-client-common
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el8eap
0:2.1.5-1.Final_redhat_00001.1.el8eap
eap8-wildfly-http-ejb-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el8eap
0:2.1.5-1.Final_redhat_00001.1.el8eap
eap8-wildfly-http-naming-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el8eap
0:2.1.5-1.Final_redhat_00001.1.el8eap
eap8-wildfly-http-transaction-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el8eap
0:2.1.5-1.Final_redhat_00001.1.el8eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el8eap
0:8.1.9.1-1.GA_redhat_00006.1.el8eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el8eap
0:8.1.9.1-1.GA_redhat_00006.1.el8eap
eap8-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:8.1.1-15.GA_redhat_00052.1.el8eap
0:8.1.1-15.GA_redhat_00052.1.el8eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el8eap
0:8.1.9.1-1.GA_redhat_00006.1.el8eap
eap8-ws-commons-XmlSchema
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 21 CVEs
before 0:2.3.3-1.redhat_00001.1.el8eap
0:2.3.3-1.redhat_00001.1.el8eap
eap8-apache-sshd
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.20.0-1.redhat_00002.1.el9eap
0:2.20.0-1.redhat_00002.1.el9eap
eap8-bouncycastle
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el9eap
0:1.86.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-jmail
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el9eap
0:1.86.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pg
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el9eap
0:1.86.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pkix
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el9eap
0:1.86.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-prov
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el9eap
0:1.86.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-util
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:1.86.0-1.redhat_00001.1.el9eap
0:1.86.0-1.redhat_00001.1.el9eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:801.9.1-1.GA_redhat_00002.1.el9eap
0:801.9.1-1.GA_redhat_00002.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:801.9.1-1.GA_redhat_00002.1.el9eap
0:801.9.1-1.GA_redhat_00002.1.el9eap
eap8-ironjacamar
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el9eap
0:3.1.1-1.Final_redhat_00001.1.el9eap
eap8-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el9eap
0:3.1.1-1.Final_redhat_00001.1.el9eap
eap8-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el9eap
0:3.1.1-1.Final_redhat_00001.1.el9eap
eap8-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el9eap
0:3.1.1-1.Final_redhat_00001.1.el9eap
eap8-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el9eap
0:3.1.1-1.Final_redhat_00001.1.el9eap
eap8-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el9eap
0:3.1.1-1.Final_redhat_00001.1.el9eap
eap8-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el9eap
0:3.1.1-1.Final_redhat_00001.1.el9eap
eap8-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el9eap
0:3.1.1-1.Final_redhat_00001.1.el9eap
eap8-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.1.1-1.Final_redhat_00001.1.el9eap
0:3.1.1-1.Final_redhat_00001.1.el9eap
eap8-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el9eap
0:2.18.11-1.redhat_00001.1.el9eap
eap8-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el9eap
0:2.18.11-1.redhat_00001.1.el9eap
eap8-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el9eap
0:2.18.11-1.redhat_00001.1.el9eap
eap8-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el9eap
0:2.18.11-1.redhat_00001.1.el9eap
eap8-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el9eap
0:2.18.11-1.redhat_00001.1.el9eap
eap8-jackson-module-jakarta-xmlbind-annotations
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el9eap
0:2.18.11-1.redhat_00001.1.el9eap
eap8-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el9eap
0:2.18.11-1.redhat_00001.1.el9eap
eap8-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.18.11-1.redhat_00001.1.el9eap
0:2.18.11-1.redhat_00001.1.el9eap
eap8-mod_cluster
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.1.1-1.Final_redhat_00001.1.el9eap
0:2.1.1-1.Final_redhat_00001.1.el9eap
eap8-neethi
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:3.2.4-1.redhat_00001.1.el9eap
0:3.2.4-1.redhat_00001.1.el9eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el9eap
0:8.1.9.1-1.GA_redhat_00006.1.el9eap
eap8-wildfly-http-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el9eap
0:2.1.5-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-client-common
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el9eap
0:2.1.5-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-ejb-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el9eap
0:2.1.5-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-naming-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el9eap
0:2.1.5-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-transaction-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.1.5-1.Final_redhat_00001.1.el9eap
0:2.1.5-1.Final_redhat_00001.1.el9eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el9eap
0:8.1.9.1-1.GA_redhat_00006.1.el9eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el9eap
0:8.1.9.1-1.GA_redhat_00006.1.el9eap
eap8-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:8.1.1-15.GA_redhat_00052.1.el9eap
0:8.1.1-15.GA_redhat_00052.1.el9eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:8.1.9.1-1.GA_redhat_00006.1.el9eap
0:8.1.9.1-1.GA_redhat_00006.1.el9eap
eap8-ws-commons-XmlSchema
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 21 CVEs
before 0:2.3.3-1.redhat_00001.1.el9eap
0:2.3.3-1.redhat_00001.1.el9eap
apache-sshd
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
apache-sshd
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 8 CVEs
before 2.20.0-150200.5.19.1
2.20.0-150200.5.19.1
mina2
Ubuntu:16.04:LTS
All versions, plus listed versions
2.0.7+dfsg-22.0.9-12.0.9-2
None known
mina2
Ubuntu:18.04:LTS
All versions, plus listed versions
2.0.16-2
None known
mina
Ubuntu:20.04:LTS
All versions, plus listed versions
1.1.7.dfsg-13
None known
mina2
Ubuntu:20.04:LTS
All versions, plus listed versions
2.0.19-2
None known
mina2
Ubuntu:Pro:22.04:LTS
All versions, plus listed versions
2.1.4-22.1.5-12.1.5-1ubuntu0.1~esm1
None known
mina2
Ubuntu:Pro:24.04:LTS
All versions, plus listed versions
2.2.1-32.2.1-3ubuntu0.1~esm1
None known
mina2
Ubuntu:26.10
All versions, plus listed versions
2.2.1-42.2.1-4ubuntu12.2.9-1
None known
mina2
Ubuntu:Pro:26.04:LTS
All versions, plus listed versions
2.2.1-42.2.1-4ubuntu0.1~esm1
None known
apache-sshd
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
before 2.20.0-1.1
2.20.0-1.1

What each source reports

CVE List Score used9.1

Apache MINA SSHD: Asynchronous authentication can bypass signature verification

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server.

Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of the library, a mechanism to perform "asynchronous authentication" exists. A server implemented with Apache MINA SSHD must contain explicit code to make use of this feature. The implementation of this feature was flawed and could potentially lead to skipping checking the signature in public-key or hostbased authentication, or returning a wrong result.

Users are recommended to upgrade to Apache MINA SSHD 2.20.0 or 3.0.0-M6, which fix the logic error and which additionally forbid the use of this "asynchronous authentication" mechanism with the public-key or hostbased authentication schemes: if used, the SSH session will be closed and the server will log an entry indicating that asynchronous authentication may be used only with password or keyboard-interactive authentication.

Record
CVE-2026-77185
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-305
Updated
2026-11-02
EUVDEUVD-2026-897599.1

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server.

Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of the library, a mechanism to perform "asynchronous authentication" exists. A server implemented with Apache MINA SSHD must contain explicit code to make use of this feature. The implementation of this feature was flawed and could potentially lead to skipping checking the signature in public-key or hostbased authentication, or returning a wrong result.

Users are recommended to upgrade to Apache MINA SSHD 2.20.0 or 3.0.0-M6, which fix the logic error and which additionally forbid the use of this "asynchronous authentication" mechanism with the public-key or hostbased authentication schemes: if used, the SSH session will be closed and the server will log an entry indicating that asynchronous authentication may be used only with password or keyboard-interactive authentication.

Record
EUVD-2026-89759
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-v223-2p4c-wp649.1

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3...

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server.

Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of the library, a mechanism to perform "asynchronous authentication" exists. A server implemented with Apache MINA SSHD must contain explicit code to make use of this feature. The implementation of this feature was flawed and could potentially lead to skipping checking the signature in public-key or hostbased authentication, or returning a wrong result.

Users are recommended to upgrade to Apache MINA SSHD 2.20.0 or 3.0.0-M6, which fix the logic error and which additionally forbid the use of this "asynchronous authentication" mechanism with the public-key or hostbased authentication schemes: if used, the SSH session will be closed and the server will log an entry indicating that asynchronous authentication may be used only with password or keyboard-interactive authentication.

Record
GHSA-v223-2p4c-wp64
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-305
Updated
2026-11-02
NVD9.1

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server.

Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of the library, a mechanism to perform "asynchronous authentication" exists. A server implemented with Apache MINA SSHD must contain explicit code to make use of this feature. The implementation of this feature was flawed and could potentially lead to skipping checking the signature in public-key or hostbased authentication, or returning a wrong result.

Users are recommended to upgrade to Apache MINA SSHD 2.20.0 or 3.0.0-M6, which fix the logic error and which additionally forbid the use of this "asynchronous authentication" mechanism with the public-key or hostbased authentication schemes: if used, the SSH session will be closed and the server will log an entry indicating that asynchronous authentication may be used only with password or keyboard-interactive authentication.

Record
CVE-2026-77185
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-305
Updated
2026-11-02
OSVDEBIAN-CVE-2026-771859.1

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server. Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of the library, a mechanism to perform "asynchronous authentication" exists. A server implemented with Apache MINA SSHD must contain explicit code to make use of this feature. The implementation of this feature was flawed and could potentially lead to skipping checking the signature in public-key or hostbased authentication, or returning a wrong result. Users are recommended to upgrade to Apache MINA SSHD 2.20.0 or 3.0.0-M6, which fix the logic error and which additionally forbid the use of this "asynchronous authentication" mechanism with the public-key or hostbased authentication schemes: if used, the SSH session will be closed and the server will log an entry indicating that asynchronous authentication may be used only with password or keyboard-interactive authentication.

Record
DEBIAN-CVE-2026-77185
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-10
OSVRHSA-2026:715418.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:71541
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-13
Show 4 moreShow less
OSVRHSA-2026:990188.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

Record
RHSA-2026:99018
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-13
OSVUBUNTU-CVE-2026-771859.1

Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server. Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of the library, a mechanism to perform "asynchronous authentication" exists. A server implemented with Apache MINA SSHD must contain explicit code to make use of this feature. The implementation of this feature was flawed and could potentially lead to skipping checking the signature in public-key or hostbased authentication, or returning a wrong result. Users are recommended to upgrade to Apache MINA SSHD 2.20.0 or 3.0.0-M6, which fix the logic error and which additionally forbid the use of this "asynchronous authentication" mechanism with the public-key or hostbased authentication schemes: if used, the SSH session will be closed and the server will log an entry indicating that asynchronous authentication may be used only with password or keyboard-interactive authentication.

Record
UBUNTU-CVE-2026-77185
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-05
OSVopenSUSE-SU-2026:11940-1No score

apache-sshd-2.20.0-1.1 on GA media

These are all security issues fixed in the apache-sshd-2.20.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11940-1
Updated
2026-11-02
OSVSUSE-SU-2026:4622-1No score

Security update for apache-sshd

This update for apache-sshd fixes the following issues:

  • CVE-2026-77185: Asynchronous authentication can bypass signature verification (bsc#1283357).
  • CVE-2026-93994: Repeated-publickey policy bypass on server (bsc#1283352).
  • CVE-2026-93995: Remote execution of JGit 'archive -o=file.zip' can write file on the server (bsc#1283350).
  • CVE-2026-93996: Memory exhaustion DoS via unbounded SCP command line read (bsc#1283348).
  • CVE-2026-94002: Memory exhaustion in SFTP client via unsolicited SFTP replies (bsc#1283347).
  • CVE-2026-94029: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension (bsc#1283346).
  • CVE-2026-94052: LDAP password authentication ineffective (bsc#1283345).
  • CVE-2026-94053: LDAP injection in sshd-ldap (bsc#1283344).

Changes for apache-sshd:

  • Update to upstream version 2.20.0:
  • GH-656 ChannelPipedInputStream: shrink buffer when emptied
  • GH-906 Fix finding a signature factory for BC ed25519 keys
  • GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT requests
  • Allow asynchronous authentication only for password and keyboard-interactive authentication schemes
  • Fix authentication requiring multiple public keys (server-side)
  • Better argument handling in sshd-git
  • More checks in authentication (server-side)
  • Better SCP command handling
  • SFTP client: simplify response message handling
  • Fix check-file-name/check-file-handle SFTP v6 extension
  • Improve LDAP authentication (sshd-ldap)
  • New Features
  • GH-905 Implement the 'from' and 'expiry-time' options in authorized_keys handling in public key authentication (server side)
Record
SUSE-SU-2026:4622-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, factsOSV
affected, facts
affectedOSV
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 159 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open