CVE-2026-127090 · Infrastructure
NO FIX YET · SEE WHAT TO DO
Maverick Synergy and Maverick Legacy SSH servers cache public key authorization decisions across usernames on a connection. An attacker holding a key authorized for one account can log in as a different account on the same connection.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Servers running Jadaptive Maverick Synergy Server or Maverick Legacy Server that accept SSH public key logins are exposed. An attacker needs a valid key for one account on the server, so systems without SSH key authentication or with only password or no SSH access can skip it.
Not affected if no-ssh-exposure, password-only-auth
Who cares java, maverick-legacy, maverick-synergy, ssh
3.0.33 or 3.1.71.8.13.0.33 (for the 3.0 line) or 3.1.7 (for the 3.1 line)1.8.1Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, contain an authentication bypass vulnerability in SSH public key authentication that reuses cached key authorization decisions across usernames. Attackers holding a key authorized for one account can authenticate it, then send a signed SSH_MSG_USERAUTH_REQUEST with a different username on the same connection to log in as that account.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.