Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-111638— sshportal through 1.19.5 Missing Authorization in 'key show' Command Exposes Private Keys

Quick assessment

Affected
moul sshportal
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SSH Portal 1.19.5 及更早版本的管理 Shell 中的 命令存在授权缺失漏洞，允许已认证的非管理员用户获取已解密的后端私有 SSH 密钥。攻击者可请求可预测的密钥名称（如 或 ）来检索私有密钥，从而直接连接后端主机，绕过访问控制列表（ACL）和会话记录机制。

CVSS 7.7 · High EPSS 0.31% · P23

Affected Version Matrix 1

VendorProduct Version RangeStatus
moul sshportal ≤ 1.19.5 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-111638

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
sshportal through 1.19.5 Missing Authorization in 'key show' Command Exposes Private Keys
Source: CVE Program / CVE List V5
Vulnerability Description
sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys and connect directly to backend hosts, bypassing ACLs and session recording.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
moul sshportal 0 ~ 1.19.5 -

II. Public POCs for CVE-2026-111638

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-111638

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-111638 (1)

Security Blog Posts for CVE-2026-111638 (1)

IV. Related Vulnerabilities

Same weakness: CWE-862

V. Comments for CVE-2026-111638

No comments yet

Leave a comment