https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T19:57:28.286728+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-7749 CVE-2018-7749 2026-10-01T19:57:28.320379+00:00

The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.

 https://vulnerability.circl.lu/vuln/usn-4854-1 USN-4854-1 — python-asyncssh vulnerability 2026-10-01T19:57:28.320596+00:00

Affected: Ubuntu:Pro:18.04:LTS: python-asyncssh

Matthijs Kooijman discovered that AsyncSSH server did not properly handle authentication under certain conditions. An attacker with a specially crafted client could use this vulnerability to skip authentication of SSH sessions.