EU
Vendor
Eugeny
30
CVEs
0
On KEV
11
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116775 New | RU russh Eugeny | 2.3 | Oct 27 | pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS) |
| CVE-2026-116774 New | RU russh Eugeny | 4.3 | Oct 27 | russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang) |
| CVE-2026-116773 New | RU russh Eugeny | 4.3 | Oct 27 | russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets |
| CVE-2026-116696 New | RU russh Eugeny | 3.3 | Oct 27 | russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages |
| CVE-2026-111061 | RU russh Eugeny | 4.3 | Oct 19 | russh agent server converts constraint records into unbounded never-rolled-back tasks |
| CVE-2026-102825 | RU russh Eugeny | 3.7 | Sep 29 | Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path |
| CVE-2026-102824 | RU russh Eugeny | 4.3 | Sep 29 | Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange |
| CVE-2026-102823 | RU russh Eugeny | 7.5 | Sep 29 | russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened |
| CVE-2026-102822 | RU russh Eugeny | 3.7 | Sep 29 | russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic |
| CVE-2026-102821 | RU russh Eugeny | 6.5 | Sep 29 | Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey |
| CVE-2026-102820 | RU russh Eugeny | 6.2 | Sep 29 | pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows) |
| CVE-2026-73489 | RU russh Eugeny | 4.3 | Aug 13 | Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records |
| CVE-2026-73430 | RU russh Eugeny | 5.3 | Aug 12 | Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB) |
| CVE-2026-73429 | RU russh Eugeny | 5.3 | Aug 12 | Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS) |
| CVE-2026-72903 | TA tabby Eugeny | 8.1 | Aug 10 | Tabby: Windows SFTP path traversal allows a malicious server to write files outside the selected download directory |
| CVE-2026-68930 | RU russh Eugeny | 6.5 | Aug 3 | Russh: Channel-scoped server callbacks can be reached without an open channel |
| CVE-2026-46709 | TA tabby Eugeny | 7.8 | Jul 15 | Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038) |
| CVE-2026-48110 | RU russh Eugeny | 7.5 | Jun 10 | Russh: SSH message fields were decoded through allocation-first parsers before field-specific bounds |
| CVE-2026-48108 | RU russh Eugeny | 5.3 | Jun 10 | Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input |
| CVE-2026-48107 | RU russh Eugeny | 6.5 | Jun 10 | Russh: Unchecked keyboard-interactive prompt count in client auth path |
| CVE-2026-46705 | RU russh Eugeny | 5.3 | Jun 10 | russh server userauth state is not reset when authentication principal changes |
| CVE-2026-46702 | RU russh Eugeny | 7.5 | Jun 10 | Russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets |
| CVE-2026-46673 | RU russh Eugeny | 7.5 | Jun 10 | Russh: Unchecked CryptoVec allocation and growth handling is reachable from local agent inputs in current russh releases and from remote SSH traffic in historical pre-0.58.0 releases |
| CVE-2026-45038 | TA tabby Eugeny | 7.8 | May 15 | Tabby: Dragging and Dropping a File into Tabby Can Lead to Code Execution |
| CVE-2026-45036 | TA tabby Eugeny | 7.0 | May 15 | Tabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zsh |
| CVE-2026-45035 | TA tabby Eugeny | 8.8 | May 15 | Tabby: RCE via `tabby://run` URL Scheme |
| CVE-2026-45037 | TA tabby Eugeny | 7.1 | May 15 | Tabby: Unsafe protocol handler execution via terminal linkifier allows arbitrary OS protocol invocation |
| CVE-2026-42189 | RU russh Eugeny | 7.5 | May 8 | Russh: Pre-auth DoS via unbounded allocation in keyboard-interactive auth |
| CVE-2025-22136 | TA tabby Eugeny | 8.6 | Jan 8 | Tabby has a TCC Bypass via Misconfigured Node Fuses |
| CVE-2024-55950 | TA tabby Eugeny | 8.6 | Dec 26 | Tabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabby |