https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:24:14.224734+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06039 bdu:2022-06039 2026-10-02T22:24:14.245861+00:00 bdu:2022-06039 https://cve.radiocsirt.org/vuln/brew-ansible-cve-2018-7750 BREW-ansible-CVE-2018-7750 — Paramiko not properly checking authentication before processing other requests 2026-10-02T22:24:14.245899+00:00

Affected: Homebrew: ansible

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

 https://cve.radiocsirt.org/vuln/cnvd-2018-06104 cnvd-2018-06104 2026-10-02T22:24:14.245935+00:00 cnvd-2018-06104 https://cve.radiocsirt.org/vuln/euvd-2026-63388 EUVD-2026-63388 2026-10-02T22:24:14.245950+00:00 EUVD-2026-63388 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7750 fkie_cve-2018-7750 2026-10-02T22:24:14.245961+00:00

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

 https://cve.radiocsirt.org/vuln/ghsa-232r-66cg-79px GHSA-232r-66cg-79px — Paramiko not properly checking authentication before processing other requests 2026-10-02T22:24:14.245983+00:00

Affected: PyPI: paramiko

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

 https://cve.radiocsirt.org/vuln/gsd-2018-7750 gsd-2018-7750 2026-10-02T22:24:14.246008+00:00 gsd-2018-7750 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11249-1 openSUSE-SU-2024:11249-1 — python-paramiko-doc-2.7.2-3.7 on GA media 2026-10-02T22:24:14.246020+00:00

python-paramiko-doc-2.7.2-3.7 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2018-19 PYSEC-2018-19 2026-10-02T22:24:14.246036+00:00

Affected: PyPI: paramiko

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

 https://cve.radiocsirt.org/vuln/rhsa-2018:0591 RHSA-2018:0591 — Red Hat Security Advisory: python-paramiko security and bug fix update 2026-10-02T22:24:14.246054+00:00

python-paramiko: Authentication bypass in transport.py

 https://cve.radiocsirt.org/vuln/suse-su-2018:0844-1 SUSE-SU-2018:0844-1 — Security update for python-paramiko 2026-10-02T22:24:14.246069+00:00

Security update for python-paramiko

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7750 UBUNTU-CVE-2018-7750 2026-10-02T22:24:14.246082+00:00

Affected: Ubuntu:14.04:LTS: paramiko, Ubuntu:16.04:LTS: paramiko

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.