CVE-2026-44405 LOW

CVE-2026-44405

Vendor Paramiko
Product Paramiko
Weakness CWE-327 · Broken crypto
Published May 5, 2026
Last update May 6, 2026
View on NVD All CVEs

CVSS base score

3.4/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

Key dates

02Disclosure timeline

May 5, 2026 CVE published
May 6, 2026 Record updated