CVE-2026-111062 | russh 0.34.0-beta.1/0.63.3 Publickey Authentication encrypted.rs server_read_auth_request_pk signature verification

October 19, 2026 Yanac

A vulnerability was found in russh 0.34.0-beta.1/0.63.3. It has been classified as critical. The affected element is the function server_read_auth_request_pk of the file russh/src/server/encrypted.rs of the component Publickey Authentication. The manipulation leads to improper verification of cryptographic signature.

This vulnerability is listed as CVE-2026-111062. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More