CVE-2026-94140: Affected product not specified by the source

Affected technology

Product not specified by the source · 0 through 1.16.1
Vendor not specified by the source

Description’s affected range: versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no

Component: Rex
Function: Rex::Commands::Rsync::sync
File: lib/Rex/Commands/Rsync.pm

What an attacker can do

The source does not specify what an attacker can achieve.

Published 22-Oct-2026 01:10 UTC

CWE: CWE-322
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-22 02:21:33.599910+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-22 02:55:50.089611+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-94140.html