Net::LibSSH before 0.004 skips SSH host-key checks (CVE-2026-94423)
connect() never compares the server host key with known_hosts, so the client can accept an unverified server.
1 stories, newest first · one card per story
connect() never compares the server host key with known_hosts, so the client can accept an unverified server.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views