{"uuid": "c0e071d3-0d99-45bb-8302-0723d8609dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77185", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117359524453653609", "content": "Apache MINA SSHD auth bypass (CVE-2026-77185, CRITICAL, CVSS 9.1): Async public-key/hostbased auth can be skipped, risking full SSH compromise. Affected: 2.0.0 \u2013 2.19.x, 3.0.0-M1 \u2013 M5. Patch to 2.20.0/3.0.0-M6. https://radar.offseq.com/threat/cve-2026-77185-cwe-305-authentication-bypass-by-primary-weakness-in-apache-software-foundation-apache-18a51f96ab18bde1 #OffSeq #Apache #Infosec", "creation_timestamp": "2026-09-30T10:30:28.818833Z"}