Vulnerabilities

TI-2026-32364 CVE-2026-44423 · GHSA-9w9c-9w8m-w89q

ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data

MEDIUM 62

ShellHub is a centralized SSH gateway.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00246 Published 2026-05-13 Fixed in 0.24.2 CWE-639

TI-2026-32365 CVE-2026-44424 · GHSA-j72x-xfwg-783f

MEDIUM 62

ShellHub is a centralized SSH gateway.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00246 Published 2026-05-13 Fixed in 0.24.2 CWE-639

TI-2026-32367 CVE-2026-44426 · GHSA-vwx9-7qcf-gg7f

MEDIUM 62

ShellHub is a centralized SSH gateway.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00308 Published 2026-05-13 Fixed in 0.24.2 CWE-639

TI-2026-32366 CVE-2026-44425 · GHSA-47r2-v3x6-wff9

LOW 24

ShellHub is a centralized SSH gateway.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00253 Published 2026-05-13 Fixed in 0.24.2 CWE-1333