moul CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH moul CVE published 2026-10-16

CVE-2026-111638

CVE-2026-111638: The sshportal management shell 'key show' command allows authenticated non-admin users to obtain decrypted backend private SSH keys due to missing authorization. This vulnerability enables attackers to request predictable key names, retrieve private keys, and connect directly to backend hosts, bypassing ACLs and session recording. System administrators and security teams should assess exp [truncated]