TI-2026-75424 CVE-2026-111638 · GHSA-xmw3-crh7-9hmm
Missing authorization in sshportal 'key show' exposes private keys
Priority HIGH 69
sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys.