TI-2026-65512 CVE-2026-102823 · GHSA-47hw-gvq5-r2gm
russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened
Priority HIGH 72
Russh is a Rust SSH client and server library.
Eugeny
Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
Eugeny records in CISA KEVNo Eugeny vulnerabilities are listed in CISA KEV.
Records
26 records
TI-2026-35550 CVE-2026-48110 · GHSA-4r3c-5hpg-58qr
Russh: SSH message fields were decoded through allocation-first parsers before field-specific bounds
Priority HIGH 72
Russh is a Rust SSH client & server library.
TI-2026-34331 CVE-2026-46702 · GHSA-wwx6-x28x-8259
Russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets
Priority HIGH 72
Russh is a Rust SSH client & server library.
TI-2026-34308 CVE-2026-46673 · GHSA-g9f8-wqj9-fjw5
Resource allocation without limits in Eugeny russh
Priority HIGH 72
Russh is a Rust SSH client & server library.
Priority HIGH 72
Tabby (formerly Terminus) is a highly configurable terminal emulator.
Priority HIGH 70
Tabby (formerly Terminus) is a highly configurable terminal emulator.
TI-2026-82122 CVE-2026-116794 · GHSA-vp5q-ff62-jwqv
Missing confirmation check in russh SSH agent for constrained keys
Priority HIGH 69
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.
TI-2026-51120 CVE-2026-72903
Tabby: Windows SFTP path traversal allows a malicious server to write files outside the selected download directory
Priority HIGH 68
Tabby (formerly Terminus) is a highly configurable terminal emulator.
TI-2026-51547 CVE-2026-73429 · GHSA-g9hv-x236-4qp3
Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)
Priority MEDIUM 63
Russh is a Rust SSH client & server library.
TI-2026-35548 CVE-2026-48108 · GHSA-76r6-x97p-67vr
Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input
Priority MEDIUM 63
Russh is a Rust SSH client & server library.
TI-2026-34333 CVE-2026-46705 · GHSA-hpv4-5h6f-wqr3
russh server userauth state is not reset when authentication principal changes
Priority MEDIUM 63
Russh is a Rust SSH client & server library.
TI-2026-65510 CVE-2026-102821 · GHSA-35g8-35p8-c8fw
Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey
Priority MEDIUM 62
Russh is a Rust SSH client and server library.
TI-2026-48467 CVE-2026-68930 · GHSA-m65r-rprj-r5rg
Russh: Channel-scoped server callbacks can be reached without an open channel
Priority MEDIUM 62
Russh is a Rust SSH client & server library.
TI-2026-65509 CVE-2026-102820 · GHSA-g4mp-vgx3-xrvm
pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)
Priority MEDIUM 61
pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to talk to a running Pageant instance.
TI-2026-81532 CVE-2026-116773 · GHSA-4p9f-7p9m-5vfg
Unbounded memory growth in russh SSH client via EXT_INFO packets
Priority MEDIUM 53
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.
TI-2026-76432 CVE-2026-111061 · GHSA-4wc5-f2rc-q74m
Unbounded task creation in russh SSH agent server exhausts memory
Priority MEDIUM 53
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.
TI-2026-51601 CVE-2026-73489 · GHSA-cqjc-rmpq-xprq
Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records
Priority MEDIUM 53
Russh is a Rust SSH client & server library.
TI-2026-65514 CVE-2026-102825 · GHSA-g6xm-f9xp-qq35
Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path
Priority MEDIUM 51
Russh is a Rust SSH client and server library.
TI-2026-65511 CVE-2026-102822 · GHSA-p8qx-h547-fjw9
russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic
Priority MEDIUM 51
Russh is a Rust SSH client and server library.
TI-2026-81531 CVE-2026-116696 · GHSA-9wfm-jcj8-jfv9
Unbounded memory growth in russh SSH agent server
Priority MEDIUM 49
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.
TI-2026-85669 CVE-2026-111062
russh SSH server accepts mismatched signature algorithm in publickey auth
Priority MEDIUM 45
russh is a Rust SSH client and server library.
TI-2026-81534 CVE-2026-116775 · GHSA-662x-8wvj-2276
Unbounded frame buffering in pageant enables memory exhaustion
Priority MEDIUM 45
pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate with a running Pageant instance.
TI-2026-51548 CVE-2026-73430 · GHSA-5xvq-cp9x-6p6r
Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)
Priority LOW 31
Russh is a Rust SSH client & server library.
TI-2026-35547 CVE-2026-48107 · GHSA-g9g7-5cgw-6v28
Russh: Unchecked keyboard-interactive prompt count in client auth path
Priority LOW 28
Russh is a Rust SSH client & server library.
TI-2026-81533 CVE-2026-116774 · GHSA-fw5c-8223-6h42
Zero maximum packet size in russh stalls SSH channel writes
Priority LOW 20
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation.