MEDIUM
fail2ban
CVE published 2026-10-13
CVE-2026-109786
A vulnerability in fail2ban allows remote unauthenticated attackers to manipulate IP address banning by crafting specific usernames, potentially blocking legitimate user logins. This issue affects fail2ban versions from 0.10.5 to 1.1.1 and requires verification of current configurations and versions to prevent potential exploitation. The sshd filter incorrectly handles usernames with an 'on <token>' suffi [truncated]