CVE-2026-44405CWE-327

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm

Low · published May 5, 2026

CVSS v3.1
3.4
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.

The record
Technical detail
CVSS v3.1
3.4 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00114 · 1.4th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2026-05-05T23:50Z
EPSS history
Timeline
  • 05 MAY 23:50Z
    In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm
    cvelistv5