CWE-322

CWE-322 · 7 records · 5 with a public proof-of-concept

Records the NVD classes under CWE-322, highest CVSS first.

  1. CRITICAL 9.1CVE-2026-94134public PoC2026-10-15

    The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.9CVE-2026-107675public PoC2026-10-08

    FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords …

    ffmpeg

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.9CVE-2026-777032026-09-24

    Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle (AiTM). This issue affects Liman Render Engine: from 1.0 before 1.2-75.

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 4.3CVE-2026-94135public PoC2026-10-15

    The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH host-key verification by default unless the connection explicitly sets `no_host_key_check` to false. Deployments that run SFTP sensors or op…

    AI risk analysis on Exploit-DB.ai →

  5. UNSCOREDCVE-2026-94423public PoC2026-10-21

    Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as soon as ssh_connect returns SSH_OK. libssh leaves the known-hosts check to the applicatio…

    AI risk analysis on Exploit-DB.ai →

  6. UNSCOREDCVE-2026-941402026-10-21

    Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync builds its ssh command with that option, for password authentication, for private-key a…

    AI risk analysis on Exploit-DB.ai →

  7. UNSCOREDCVE-2026-89422public PoC2026-09-22

    Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a TLS 1.3 client connection to impersonate the intended server. A pre_shared_key extension in the ServerHello that the client never offered causes the client …

    AI risk analysis on Exploit-DB.ai →