CVE Catalog
CVE-2026-44405
LowCVSS 3.4Exploitation Probability (EPSS)
Low risk0.11%
2th percentile - higher than 2% of all known CVEs
Summary
In Paramiko through 4.0.0 before commit a448945, the rsakey.py file allows the SHA-1 algorithm.
Risk Assessment
The organization is at risk of cryptographic attacks exploiting SHA-1 weaknesses, potentially compromising RSA key integrity.
Recommendation
Update Paramiko to a version containing commit a448945 or later, which disables SHA-1.
Original NVD description (English source)
In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.