CVE-2026-21670
HIGHCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Lifecycle Timeline
2Description
A vulnerability allowing a low-privileged user to extract saved SSH credentials.
Analysis
Unauthorized SSH credential extraction affects systems where low-privileged users can access stored authentication material, enabling account compromise without administrative access. The network-accessible vulnerability requires valid user credentials to exploit but impacts the entire system's security posture by exposing sensitive SSH keys. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Identify all systems running the vulnerable software and assess which contain SSH credentials; restrict local access to affected systems where possible and review user access logs. Within 7 days: Implement compensating controls including credential rotation for all SSH keys stored on vulnerable systems, disable SSH credential caching if available, and enforce network segmentation to limit lateral movement. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today