{"vulnerability": "CVE-2026-77185", "sightings": [{"uuid": "c0e071d3-0d99-45bb-8302-0723d8609dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77185", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117359524453653609", "content": "Apache MINA SSHD auth bypass (CVE-2026-77185, CRITICAL, CVSS 9.1): Async public-key/hostbased auth can be skipped, risking full SSH compromise. Affected: 2.0.0 \u2013 2.19.x, 3.0.0-M1 \u2013 M5. Patch to 2.20.0/3.0.0-M6. https://radar.offseq.com/threat/cve-2026-77185-cwe-305-authentication-bypass-by-primary-weakness-in-apache-software-foundation-apache-18a51f96ab18bde1 #OffSeq #Apache #Infosec", "creation_timestamp": "2026-09-30T10:30:28.818833Z"}, {"uuid": "b7bcc8e1-1350-44d8-a6cf-62c8bd4338f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77185", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwq56wiarx22", "content": "Apache MINA SSHD hit by CRITICAL auth bypass (CVE-2026-77185). Affects 2.0.0 \u2013 2.19.x, 3.0.0-M1 \u2013 M5. Upgrade to 2.20.0/3.0.0-M6 to prevent unauthorized SSH access. https://radar.offseq.com/threat/cve-2026-77185-cwe-305-authentication-bypass-by-primary-weakness-in-apache-software-foundation-apach...", "creation_timestamp": "2026-09-30T10:30:30.772890Z"}, {"uuid": "d4b7ae3b-ba77-459e-b99e-d426cfce8852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77185", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwq6xozvdj2y", "content": "\ud83d\udd34 CVE-2026-77185 - Critical (9.1)\n\nAuthentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77185/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-30T11:02:16.319898Z"}, {"uuid": "bf408653-f142-467b-8cd6-beeff4c390fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77185", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwqcm4nenq24", "content": "\ud83d\udea8 CVE-2026-77185 \u2014 CVSS 9.1 CRITICAL\n\nAuthentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 fo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77185\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T12:07:21.954616Z"}]}