Rronf

Products

Exploited and recent CVEs

• CVE-2026-62949 Medium 6.5 AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION 0.4%
• CVE-2026-45309 High 8.2 AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username 0.6%
• CVE-2026-54590 Medium 5.9 AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion 0.3%
• CVE-2026-54591 High 8.1 AsyncSSH: SCP Path Traversal to Arbitrary File Write 0.5%