CVE-2026-46595

CriticalCVSS 10.0

Published: 22/05/2026(UTC)Updated: 20/08/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

41th percentile - higher than 41% of all known CVEs

Summary

The fix for CVE-2024-45337 regarding bypass of source address validation in SSH configurations is considered incomplete. If a callback type other than public key is used, source address validation may be skipped.

Risk Assessment

An attacker can exploit this vulnerability to bypass IP address restrictions in SSH, potentially leading to unauthorized access.

Recommendation

Apply additional patches provided by the vendor and ensure SSH configuration uses only public key authentication.

Original NVD description (English source)

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.