Red Hat Security AdvisoryRHSA-2026:71541
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-09-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images maven3.9-3.9.16-0.3.hum1@noarch@public-hummingbird-aarch64-rpms, maven3.9-3.9.16-0.3.hum1@noarch@public-hummingbird-x86_64-rpms, maven3.9-3.9.16-0.3.hum1@src +2
Fixes 2 records
Priority MEDIUM 47
Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00403 · Published 2026-09-30 · Partial fix · 2.20.0, 3.0.0-M6 CWE-305
Priority LOW 37
Apache MINA SSHD is a Java library for client-side and server-side SSH.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00303 · Published 2026-09-30 · Partial fix · 2.20.0, 3.0.0-M6 CWE-304
