moul vulnerabilities

Products

• moul/sshportal 1

Latest moul CVEs

Newest publication first

1. CVE-2026-111638 sshportal through 1.19.5 Missing Authorization in 'key show' Command Exposes Private Keys

   Published 2026-10-16

   High·CVSS 8.3 EPSS 0.40%

   sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retri...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.