Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 3 total.
Improper certificate validation in Apache MINA SSHD (CVE-2026-56624)
Apache MINA SSHD's server-side OpenSSH user certificate validation failed to check or validate the force-command and verify-required options that may be embedded in a user certificate. As a result, a user authenticati...
Fixed in 2.19.0; 3.0.0-M5
Path traversal in Apache MINA SSHD sshd-git on Windows (CVE-2026-56623)
A path traversal vulnerability in the sshd-git component of Apache MINA SSHD allows an authenticated remote user to access git repositories outside the configured server-side root directory when the server runs on Win...
Fixed in 2.19.0; 3.0.0-M5
Path traversal in Apache MINA SSHD sshd-scp component (CVE-2026-56452)
A path traversal vulnerability in the sshd-scp component of Apache MINA SSHD allows a malicious sender to supply filenames containing path components in SCP "C" or "D" commands. Because received filenames were not val...
Fixed in 2.19.0; 3.0.0-M5