Posted by Ryo utomo on Nov 12 Hello, This is a public disclosure of CVE-2026-126641, a host key verification flaw in ansible-pylibssh and in the ansible.netcommon libssh connection plugin. Red Hat Product Security confirmed the issue, assigned the CVE and lifted the embargo on 2026-11-12. Summary When trust-on-first-use is enabled (host_key_auto_add on the ansible.netcommon libssh plugin, or AutoAddPolicy in pylibssh), a host that is already in known_hosts but now...
CVE-2026-126641: ansible-pylibssh / ansible.netcommon libssh: changed SSH host key accepted when host_key_auto_add is enabled
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/684
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
dbus: multiple denial-of-service issues
Posted by Simon McVittie on Nov 12 Today's dbus 1.16.4 release includes fixes for several denial-of-service issues. Another local denial of service, dbus#589 (see…
Apache TomEE: 38 CVEs addressed in 10.3.0 and 11.0.0-M2 (combined announcement)
Posted by Markus Jung on Nov 12 On 10 November 2026, the Apache TomEE project published 38 security advisories on users () tomee apache org. This message consolidates…
0% GPU utilization: How SANSAR hides Linux cryptomining
Elastic Security Labs is tracking REF3364, a Linux cryptomining intrusion that combines custom malware with publicly available miners. The toolkit includes SANSAR, a…
CVE-2026-108472 - xfs_admin allows for OS command injection
Posted by Marco Benatto on Nov 11 Hello all, on behalf of Red Hat Product Security team I'm disclosing a flaw in the xfs_admin utility present in the xfsprogs suite…
The global socket: how threat actors are weaponizing GSocket for stealthy C2
When one RCE stops being just one RCE Observed attack chains How threat actors deploy and operate GSocket How GSocket reconnects without a fixed C2 address Mitigation…
Re: [musl] Re: [oss-security] "sshole": password authentication bypass: OpenSSH + musl libc
Posted by Rich Felker on Nov 09 I didn't see you'd also asked this on-list, so copying my answer here: This will possibly be changed (to always return null for failure)…