Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-94423— Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts

Quick assessment

Affected
CVE-2026-94423
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Perl 的 Net::LibSSH 模块在 0.004 版本之前存在认证漏洞：该模块在连接时会向未经身份验证的服务器进行认证，因为其 connect 函数从未将服务器主机密钥与 known_hosts 文件进行比对。 connect 函数在 ssh_connect 返回 SSH_OK 时即报告连接成功。libssh 库本身将已知主机密钥的校验工作留给应用程序处理，而该 Perl 绑定却从未执行此检查，因此即使为会话设置了 strict_hostkeycheck 和 knownhosts 选项，这些设置也毫无实际作

AI Predicted 7.4 Difficulty: Easy

I. Basic Information for CVE-2026-94423

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts
Source: CVE Program / CVE List V5
Vulnerability Description
Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as soon as ssh_connect returns SSH_OK. libssh leaves the known-hosts check to the application, and this binding never makes it, so the strict_hostkeycheck and knownhosts options are set on the session and then decide nothing. Password, agent and public-key authentication, channel and SFTP operations all run on a session whose peer was never identified, so an attacker who can redirect the connection receives the password when password authentication is used, and commands and data sent over the session.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
未进行实体认证的密钥交换
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 0 ~ 0.004 -

II. Public POCs for CVE-2026-94423

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-94423

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-94423 (1)

Vendor Pages for CVE-2026-94423 (1)

IV. Related Vulnerabilities

Same weakness: CWE-322

V. Comments for CVE-2026-94423

No comments yet

Leave a comment