Review
GETTY
CVE published 2026-10-21
CVE-2026-94423
CVE-2026-94423 debrief: Net::LibSSH before 0.004 for Perl has a vulnerability where the connect function does not verify the server's host key against known_hosts, allowing for potential man-in-the-middle attacks. This issue arises because libssh leaves the known-hosts check to the application, and the Net::LibSSH binding does not perform this check. As a result, an attacker could potentially redirect the [truncated]