VULNRABLE / Vulnerability / CVE-2026-111062
CVE-2026-111062
LOW LOW russh GHSA
Exploit verdict: No active-exploit signal
CVSS Score
2
Severity
LOW
EPSS
—
Source
GHSA
Summary
A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
What this means
CVE-2026-111062 is a low-severity vulnerability affecting russh, rated CVSS 2. Published October 19, 2026.
View full advisory at GHSA →