RHSA-2026:53643
Vulnerability from csaf_redhat - Published: 2026-08-13 14:51 - Updated: 2026-08-13 23:29Summary
Red Hat Security Advisory: Red Hat build of Quarkus 3.27.5 release and security update
Severity
Important
Notes
Topic: An update is now available for Red Hat build of Quarkus.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE links in the References section.
Details: This release of Red Hat build of Quarkus 3.27.5 includes the following CVE fixes:
* scram-common: SCRAM Libraries: Authentication downgrade via TLS man-in-the-middle attack [quarkus-3.27] (CVE-2026-53712)
* jansi: Jansi: Heap buffer overflow leads to Denial of Service [quarkus-3.27] (CVE-2026-8484)
* postgresql: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade [quarkus-3.27] (CVE-2026-54291)
* sshd-core: Apache MINA SSHD: Unauthorized command execution due to
improper certificate validation [quarkus-3.27] (CVE-2026-56624)
For more information, see the release notes page listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Jansi. A heap buffer overflow vulnerability exists in the Jansi Java Native Interface (JNI) 'ioctl()' wrapper. This is due to a lack of size verification for the argument array before the system call, which can lead to heap corruption. An attacker could exploit this to cause application crashes, resulting in a Denial of Service (DoS).
5.0 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat build of Quarkus 3.27.5
Red Hat / Red Hat build of Quarkus
|
cpe:/a:redhat:quarkus:3.27::el8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the SCRAM (Salted Challenge Response Authentication Mechanism) client and common libraries. An attacker performing a man-in-the-middle (MITM) attack on a Transport Layer Security (TLS) connection can silently downgrade the authentication process. This vulnerability allows the attacker to bypass the stronger SCRAM-SHA-256-PLUS authentication with channel binding, forcing a weaker SCRAM-SHA-256 authentication without channel binding, which could compromise the integrity of the authentication.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat build of Quarkus 3.27.5
Red Hat / Red Hat build of Quarkus
|
cpe:/a:redhat:quarkus:3.27::el8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A remote attacker who can intercept a TLS (Transport Layer Security) connection can silently downgrade connections configured to require channel binding from SCRAM-SHA-256-PLUS to plain SCRAM-SHA-256. This downgrade bypasses the intended man-in-the-middle protection, allowing the attacker to potentially intercept or alter sensitive communication. The vulnerability occurs because the system fails to properly validate the channel binding when a specific type of certificate is used.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat build of Quarkus 3.27.5
Red Hat / Red Hat build of Quarkus
|
cpe:/a:redhat:quarkus:3.27::el8
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Apache MINA SSHD (server-side). During user authentication, the server's OpenSSH user certificate validation process failed to properly check for or validate unsupported options like 'force-command' or 'verify-required' embedded within a user's certificate. This oversight could allow an authenticated user to bypass intended restrictions and execute commands beyond those specified in their certificate, potentially leading to unauthorized actions on the server.
7.3 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat build of Quarkus 3.27.5
Red Hat / Red Hat build of Quarkus
|
cpe:/a:redhat:quarkus:3.27::el8
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
References
47 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat build of Quarkus.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release of Red Hat build of Quarkus 3.27.5 includes the following CVE fixes:\n\n* scram-common: SCRAM Libraries: Authentication downgrade via TLS man-in-the-middle attack [quarkus-3.27] (CVE-2026-53712)\n\n* jansi: Jansi: Heap buffer overflow leads to Denial of Service [quarkus-3.27] (CVE-2026-8484)\n\n* postgresql: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade [quarkus-3.27] (CVE-2026-54291)\n\n* sshd-core: Apache MINA SSHD: Unauthorized command execution due to\nimproper certificate validation [quarkus-3.27] (CVE-2026-56624)\n\nFor more information, see the release notes page listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:53643",
"url": "https://access.redhat.com/errata/RHSA-2026:53643"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/products/quarkus/",
"url": "https://access.redhat.com/products/quarkus/"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=3.27.5",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=3.27.5"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.27",
"url": "https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.27"
},
{
"category": "external",
"summary": "QUARKUS-7957",
"url": "https://issues.redhat.com/browse/QUARKUS-7957"
},
{
"category": "external",
"summary": "QUARKUS-8319",
"url": "https://issues.redhat.com/browse/QUARKUS-8319"
},
{
"category": "external",
"summary": "QUARKUS-8320",
"url": "https://issues.redhat.com/browse/QUARKUS-8320"
},
{
"category": "external",
"summary": "QUARKUS-8321",
"url": "https://issues.redhat.com/browse/QUARKUS-8321"
},
{
"category": "external",
"summary": "QUARKUS-8322",
"url": "https://issues.redhat.com/browse/QUARKUS-8322"
},
{
"category": "external",
"summary": "QUARKUS-8323",
"url": "https://issues.redhat.com/browse/QUARKUS-8323"
},
{
"category": "external",
"summary": "QUARKUS-8324",
"url": "https://issues.redhat.com/browse/QUARKUS-8324"
},
{
"category": "external",
"summary": "QUARKUS-8325",
"url": "https://issues.redhat.com/browse/QUARKUS-8325"
},
{
"category": "external",
"summary": "QUARKUS-8326",
"url": "https://issues.redhat.com/browse/QUARKUS-8326"
},
{
"category": "external",
"summary": "QUARKUS-8327",
"url": "https://issues.redhat.com/browse/QUARKUS-8327"
},
{
"category": "external",
"summary": "QUARKUS-8328",
"url": "https://issues.redhat.com/browse/QUARKUS-8328"
},
{
"category": "external",
"summary": "QUARKUS-8329",
"url": "https://issues.redhat.com/browse/QUARKUS-8329"
},
{
"category": "external",
"summary": "QUARKUS-8330",
"url": "https://issues.redhat.com/browse/QUARKUS-8330"
},
{
"category": "external",
"summary": "QUARKUS-8429",
"url": "https://issues.redhat.com/browse/QUARKUS-8429"
},
{
"category": "external",
"summary": "QUARKUS-8430",
"url": "https://issues.redhat.com/browse/QUARKUS-8430"
},
{
"category": "external",
"summary": "QUARKUS-8431",
"url": "https://issues.redhat.com/browse/QUARKUS-8431"
},
{
"category": "external",
"summary": "QUARKUS-8432",
"url": "https://issues.redhat.com/browse/QUARKUS-8432"
},
{
"category": "external",
"summary": "QUARKUS-8542",
"url": "https://issues.redhat.com/browse/QUARKUS-8542"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53643.json"
}
],
"title": "Red Hat Security Advisory: Red Hat build of Quarkus 3.27.5 release and security update",
"tracking": {
"current_release_date": "2026-08-13T23:29:57+00:00",
"generator": {
"date": "2026-08-13T23:29:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.15"
}
},
"id": "RHSA-2026:53643",
"initial_release_date": "2026-08-13T14:51:19+00:00",
"revision_history": [
{
"date": "2026-08-13T14:51:19+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-13T14:51:19+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-13T23:29:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Quarkus 3.27.5",
"product": {
"name": "Red Hat build of Quarkus 3.27.5",
"product_id": "Red Hat build of Quarkus 3.27.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quarkus:3.27::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Quarkus"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-8484",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-06-16T12:00:55.364067+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489141"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jansi. A heap buffer overflow vulnerability exists in the Jansi Java Native Interface (JNI) \u0027ioctl()\u0027 wrapper. This is due to a lack of size verification for the argument array before the system call, which can lead to heap corruption. An attacker could exploit this to cause application crashes, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jansi: org.fusesource.jansi/jansi: Jansi: Heap buffer overflow leads to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate vulnerability in Jansi\u0027s JNI `ioctl()` wrapper can lead to a denial of service due to a heap buffer overflow. Exploitation requires local access and user interaction, as the flaw stems from insufficient size verification of the argument array before a system call, potentially causing application instability. The unmaintained status of the Jansi project increases the risk associated with this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat build of Quarkus 3.27.5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8484"
},
{
"category": "external",
"summary": "RHBZ#2489141",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489141"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8484",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8484"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8484",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8484"
},
{
"category": "external",
"summary": "https://cert.pl/en/posts/2026/06/CVE-2026-8484",
"url": "https://cert.pl/en/posts/2026/06/CVE-2026-8484"
},
{
"category": "external",
"summary": "https://github.com/fusesource/jansi/tree/master",
"url": "https://github.com/fusesource/jansi/tree/master"
}
],
"release_date": "2026-06-16T10:32:14.198000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T14:51:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor information about how to apply this update, see https://access.redhat.com/articles/11258.",
"product_ids": [
"Red Hat build of Quarkus 3.27.5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53643"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat build of Quarkus 3.27.5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat build of Quarkus 3.27.5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jansi: org.fusesource.jansi/jansi: Jansi: Heap buffer overflow leads to Denial of Service"
},
{
"cve": "CVE-2026-53712",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-07-17T19:01:50.225357+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2501848"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SCRAM (Salted Challenge Response Authentication Mechanism) client and common libraries. An attacker performing a man-in-the-middle (MITM) attack on a Transport Layer Security (TLS) connection can silently downgrade the authentication process. This vulnerability allows the attacker to bypass the stronger SCRAM-SHA-256-PLUS authentication with channel binding, forcing a weaker SCRAM-SHA-256 authentication without channel binding, which could compromise the integrity of the authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.ongres.scram/scram-client: com.ongres.scram/scram-common: SCRAM Libraries: Authentication downgrade via TLS man-in-the-middle attack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in SCRAM client and common libraries, used in Red Hat products, allows a TLS man-in-the-middle attacker to silently downgrade authentication. While requiring a sophisticated network attack, successful exploitation bypasses stronger channel-bound authentication, potentially compromising the integrity of user sessions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat build of Quarkus 3.27.5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53712"
},
{
"category": "external",
"summary": "RHBZ#2501848",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501848"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53712",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53712"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53712",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53712"
},
{
"category": "external",
"summary": "https://github.com/ongres/scram/releases/tag/3.3",
"url": "https://github.com/ongres/scram/releases/tag/3.3"
},
{
"category": "external",
"summary": "https://github.com/ongres/scram/security/advisories/GHSA-p9jg-fcr6-3mhf",
"url": "https://github.com/ongres/scram/security/advisories/GHSA-p9jg-fcr6-3mhf"
}
],
"release_date": "2026-07-17T18:19:11.896000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T14:51:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor information about how to apply this update, see https://access.redhat.com/articles/11258.",
"product_ids": [
"Red Hat build of Quarkus 3.27.5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53643"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat build of Quarkus 3.27.5"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat build of Quarkus 3.27.5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "com.ongres.scram/scram-client: com.ongres.scram/scram-common: SCRAM Libraries: Authentication downgrade via TLS man-in-the-middle attack"
},
{
"cve": "CVE-2026-54291",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-07-06T20:02:25.451792+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497465"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A remote attacker who can intercept a TLS (Transport Layer Security) connection can silently downgrade connections configured to require channel binding from SCRAM-SHA-256-PLUS to plain SCRAM-SHA-256. This downgrade bypasses the intended man-in-the-middle protection, allowing the attacker to potentially intercept or alter sensitive communication. The vulnerability occurs because the system fails to properly validate the channel binding when a specific type of certificate is used.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat build of Quarkus 3.27.5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54291"
},
{
"category": "external",
"summary": "RHBZ#2497465",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497465"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54291"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54291",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54291"
},
{
"category": "external",
"summary": "https://github.com/ongres/scram/releases/tag/3.3",
"url": "https://github.com/ongres/scram/releases/tag/3.3"
},
{
"category": "external",
"summary": "https://github.com/pgjdbc/pgjdbc/commit/77df98e4e66c12936ded3478a0954f6f580bad99",
"url": "https://github.com/pgjdbc/pgjdbc/commit/77df98e4e66c12936ded3478a0954f6f580bad99"
},
{
"category": "external",
"summary": "https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-j92g-9f8w-j867",
"url": "https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-j92g-9f8w-j867"
}
],
"release_date": "2026-07-06T18:55:01.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T14:51:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor information about how to apply this update, see https://access.redhat.com/articles/11258.",
"product_ids": [
"Red Hat build of Quarkus 3.27.5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat build of Quarkus 3.27.5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade"
},
{
"cve": "CVE-2026-56624",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-07-20T21:01:48.146372+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503053"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache MINA SSHD (server-side). During user authentication, the server\u0027s OpenSSH user certificate validation process failed to properly check for or validate unsupported options like \u0027force-command\u0027 or \u0027verify-required\u0027 embedded within a user\u0027s certificate. This oversight could allow an authenticated user to bypass intended restrictions and execute commands beyond those specified in their certificate, potentially leading to unauthorized actions on the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat build of Quarkus 3.27.5"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56624"
},
{
"category": "external",
"summary": "RHBZ#2503053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56624"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/o4c2jml522j3z80gbryqzc2f1253ltp6",
"url": "https://lists.apache.org/thread/o4c2jml522j3z80gbryqzc2f1253ltp6"
}
],
"release_date": "2026-07-20T20:28:26.333000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T14:51:19+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor information about how to apply this update, see https://access.redhat.com/articles/11258.",
"product_ids": [
"Red Hat build of Quarkus 3.27.5"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:53643"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat build of Quarkus 3.27.5"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.apache.sshd/sshd-core: Apache MINA SSHD: Unauthorized command execution due to improper certificate validation"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…