sshportal vulnerabilities

CVEs whose affected-version data names the sshportal package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111638High· 7.7

yesterday

sshportal through 1.19.5 Missing Authorization in 'key show' Command Exposes Private Keys

sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable …

▾ Twilightmoul · sshportalvia CVEORG