CVE-2026-77473

Published 9 November 2026 · tracked since 10 November 2026

Description

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.1, recursive remote-to-local SFTP copies in SFTPClient._copy() in asyncssh/sftp.py, reached through get(), mget(), and copy(), trus

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-124604 MEDIUM 6.2
• CVE-2026-124603 MEDIUM 6.2
• CVE-2026-124602 MEDIUM 6.2
• CVE-2026-124601 MEDIUM 6.2
• CVE-2026-124599 MEDIUM 6.2
• CVE-2026-124598 HIGH 7.5
• CVE-2026-109810 MEDIUM 6.1
• CVE-2026-109799 HIGH 7.5
• CVE-2026-109797 HIGH 7.1
• CVE-2026-107244 HIGH 7.6

→ Open the live CVE board · all tools