CVE-2026-11745 – CentralDogma Git Mirror SSH Host Key Verification Bypass

CVE ID :CVE-2026-11745

Published : June 22, 2026, 2:33 a.m. | 1 hour, 10 minutes ago

Description :A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing an on-path attacker to perform man-in-the-middle attacks and compromise mirrored repositories.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…