https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:35:23.707100+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-420 certfr-2020-avi-420 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta… 2026-10-03T07:35:23.734893+00:00 certfr-2020-avi-420 https://cve.radiocsirt.org/vuln/cnvd-2016-01639 cnvd-2016-01639 2026-10-03T07:35:23.734938+00:00 cnvd-2016-01639 https://cve.radiocsirt.org/vuln/euvd-2026-81563 EUVD-2026-81563 2026-10-03T07:35:23.734954+00:00 EUVD-2026-81563 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0787 fkie_cve-2016-0787 2026-10-03T07:35:23.734965+00:00

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

 https://cve.radiocsirt.org/vuln/ghsa-6wmj-27wm-wwx6 GHSA-6wmj-27wm-wwx6 2026-10-03T07:35:23.734993+00:00

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."

 https://cve.radiocsirt.org/vuln/gsd-2016-0787 gsd-2016-0787 2026-10-03T07:35:23.735009+00:00 gsd-2016-0787 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10190-1 openSUSE-SU-2024:10190-1 — libssh2-1-1.7.0-1.5 on GA media 2026-10-03T07:35:23.735020+00:00

libssh2-1-1.7.0-1.5 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2016:0718-1 SUSE-SU-2016:0718-1 — Security update for libssh2_org 2026-10-03T07:35:23.735038+00:00

Security update for libssh2_org

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0787 UBUNTU-CVE-2016-0787 2026-10-03T07:35:23.735053+00:00

Affected: Ubuntu:14.04:LTS: libssh2, Ubuntu:16.04:LTS: libssh2

The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."