russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-116696 · Microsoft / collected KEV context

EUVD-2026-111387

GHSA-9wfm-jcj8-jfv9

cve-program · CVE-2026-116696

• https://github.com/Eugeny/russh/security/advisories/GHSA-9wfm-jcj8-jfv9
• https://github.com/Eugeny/russh/commit/23aa5d28fe9601c5bdfe9e60b7ec5d4f882c3de6
• https://github.com/Eugeny/russh/releases/tag/v0.65.0

euvd · EUVD-2026-111387

• https://github.com/Eugeny/russh/security/advisories/GHSA-9wfm-jcj8-jfv9
• https://github.com/Eugeny/russh/commit/23aa5d28fe9601c5bdfe9e60b7ec5d4f882c3de6
• https://github.com/Eugeny/russh/releases/tag/v0.65.0

nvd · CVE-2026-116696

• https://github.com/Eugeny/russh/commit/23aa5d28fe9601c5bdfe9e60b7ec5d4f882c3de6
• https://github.com/Eugeny/russh/releases/tag/v0.65.0
• https://github.com/Eugeny/russh/security/advisories/GHSA-9wfm-jcj8-jfv9

osv · GHSA-9wfm-jcj8-jfv9

• https://github.com/Eugeny/russh/security/advisories/GHSA-9wfm-jcj8-jfv9
• https://nvd.nist.gov/vuln/detail/CVE-2026-116696
• https://github.com/Eugeny/russh/commit/23aa5d28fe9601c5bdfe9e60b7ec5d4f882c3de6
• https://github.com/Eugeny/russh
• https://github.com/Eugeny/russh/releases/tag/v0.65.0

• russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages · Newly collected advisory · 30 Oct 2026
• russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages · Newly collected advisory · 27 Oct 2026