Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
Dropbear may let attackers bypass login authentication
published 4 days ago
Summary
The Dropbear SSH software has a flaw in the part that handles user authentication requests. An attacker could exploit this to gain access without proper credentials. Update Dropbear to the latest version or apply the vendor's recommended patch promptly.
What to do
- Update cleanstart dropbear to version 2018.76-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | dropbear |
< 2018.76-r2 Fix: upgrade to 2018.76-r2
|
Original advisory text
recv_msg_userauth_request function in svr-auth
Security vulnerability affects the dropbear package. The recv_msg_userauth_request function in svr-auth.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-OG31029 · OSV
Track software like this
Free during beta