CVE-2026-21439

Katalog CVE

CVSS 5.3 · Medium EPSS 0,33%

Kerentanan Improper Neutralization of Escape, Meta, or Control Sequences pada badkeys. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

badkeys is a tool and library for checking cryptographic public keys for known vulnerabilities. In versions 0.0.15 and below, an attacker may inject content with ASCII control characters like vertical tabs, ANSI escape sequences, etc., that can create misleading output of the badkeys command-line tool. This impacts scanning DKIM keys (both --dkim and --dkim-dns), SSH keys (--ssh-lines mode), and filenames in various modes. This issue is fixed in version 0.0.16.

Rincian

Terbit di NVD

6 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/badkeys/badkeys/commit/635a2f3b1b50a895d8b09ec8629efc06189f349a patch
• https://github.com/badkeys/badkeys/commit/de631f69f040974bb5fb442cdab9a1d904c64087 patch
• https://github.com/badkeys/badkeys/issues/40 exploit · issue tracking · advisory pihak ketiga
• https://github.com/badkeys/badkeys/security/advisories/GHSA-wjpc-4f29-83h3 advisory pihak ketiga