CyberRota
Back to database

CVE-2026-45361

HIGH · CVSS 8.1 EPSS 0.84% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-25 · Last synced: 2026-06-20

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-45361
Severity
HIGH
CVSS
8.1
EPSS
0.84%
Apache

Original NVD Description

Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path network attackers who can intercept or modify the session. Users are advised to upgrade to `apache-airflow-providers-google` 22.0.0 or later.