https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:38:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-270738 EUVD-2026-270738 https://cve.radiocsirt.org/vuln/euvd-2026-270738 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4871 <p>A vulnerability was found in Satellite. When running a remote execution job on a host, the host&#39;s SSH key is not being checked. When the key changes, the Satellite still connects it because it uses &#34;-o StrictHostKeyChecking=no&#34;. This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker&#39;s ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.</p> <p>A vulnerability was found in Satellite. When running a remote execution job on a host, the host&#39;s SSH key is not being checked. When the key changes, the Satellite still connects it because it uses &#34;-o StrictHostKeyChecking=no&#34;. This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker&#39;s ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-4871 https://cve.radiocsirt.org/vuln/ghsa-q5x2-4347-hrg2 <p>A vulnerability was found in Satellite. When running a remote execution job on a host, the host&#39;s SSH key is not being checked. When the key changes, the Satellite still connects it because it uses &#34;-o StrictHostKeyChecking=no&#34;. This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker&#39;s ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.</p> <p>A vulnerability was found in Satellite. When running a remote execution job on a host, the host&#39;s SSH key is not being checked. When the key changes, the Satellite still connects it because it uses &#34;-o StrictHostKeyChecking=no&#34;. This flaw can lead to a man-in-the-middle attack (MITM), denial of service, leaking of secrets the remote execution job contains, or other issues that may arise from the attacker&#39;s ability to forge an SSH key. This issue does not directly allow unauthorized remote execution on the Satellite, although it can leak secrets that may lead to it.</p> https://cve.radiocsirt.org/vuln/ghsa-q5x2-4347-hrg2 https://cve.radiocsirt.org/vuln/rhba-2024:4589 <p>foreman: Host ssh key not being checked in remote execution</p> <p>foreman: Host ssh key not being checked in remote execution</p> https://cve.radiocsirt.org/vuln/rhba-2024:4589