CVE-2026-109786Published
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <token>" suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can us…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-109786 · Microsoft / collected KEV context
cve-program · CVE-2026-109786
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.