News
cybersecurity OpenAI models hacked a crypto wallet and breached more websites - Ars Technica Security cybersecurity BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs - Dark Reading cybersecurity Critical BlockStrap flaw lets hackers run code on Magento servers - BleepingComputer cybersecurity Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk - Dark Reading cybersecurity Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform - Dark Reading cybersecurity Enterprise AI Enters Risk Management Phase as Security Concerns Rise - Dark Reading ai curl 8.23.0 patches an HTTP/2 vulnerability found with Claude - Pasquale Pillitteri - Anthropic - Claude AI cybersecurity AI Takes Control of Robotic Arm in 16 Minutes Flat - Dark Reading cybersecurity Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists - Wired Security ai Roundtables: A Conversation With the Creator of AI-Designed Viruses - MIT Technology Review cybersecurity Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug - The Hacker News cybersecurity Zero-click attacks used targeted ads to deliver Candiru spyware - BleepingComputer cybersecurity Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor - The Hacker News cybersecurity UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing - The Hacker News threat-intel Researchers Demonstrate iOS 27.0.1 Untethered Jailbreak on iPhone 18 Pro - GBHackers
1 / 15
All news ›
Cybersecurity

By Default, Insecure: Apache Airflow Disables SSH Host Key Verification

OX Security ·

Vulnerability Details CVE-2026-94134 – SSH hook default, both providers CVE-2026-94135 – Async SFTP path Severity: High – CVSS 8.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) CWE: CWE-322 (Key Exchange without Entity Authentication) Affected packages: apache-airflow-providers-ssh and apache-airflow-providers-sftp – both through version 6.0.1 Fixed in: apache-airflow-providers-ssh 7.0.0 (CVE-2026-94134), apache-airflow-providers-sftp 7.0.0 (CVE-2026-94135) Overview OX Security Research discovered that Apache Airflow disables SSH […] The post By Default, Insecure: Apache Airflow Disables SSH Host Key Verification appeared first on OX Security .

Continue on OX Security ↗ ‹ All news