CVE-2026-4541

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4541", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-03-21T15:10:27.592Z", "datePublished": "2026-03-22T08:35:03.623Z", "dateUpdated": "2026-04-18T03:39:33.191Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-18T03:39:33.191Z"}, "title": "janmojzis tinyssh Ed25519 Signature crypto_sign_ed25519_tinyssh.c signature verification", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-347", "lang": "en", "description": "Improper Verification of Cryptographic Signature"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-345", "lang": "en", "description": "Insufficient Verification of Data Authenticity"}]}], "affected": [{"vendor": "janmojzis", "product": "tinyssh", "versions": [{"version": "20250501", "status": "affected"}, {"version": "20260301", "status": "unaffected"}], "modules": ["Ed25519 Signature Handler"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in janmojzis tinyssh up to 20250501. Impacted is an unknown function of the file tinyssh/crypto_sign_ed25519_tinyssh.c of the component Ed25519 Signature Handler. This manipulation causes improper verification of cryptographic signature. The attack is restricted to local execution. The attack's complexity is rated as high. The exploitability is considered difficult. The exploit has been published and may be used. Upgrading to version 20260301 is recommended to address this issue. Patch name: 9c87269607e0d7d20174df742accc49c042cff17. Upgrading the affected component is recommended."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2, "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "LOW"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 2.5, "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 2.5, "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1, "vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-03-01T00:00:00.000Z", "lang": "en", "value": "Countermeasure disclosed"}, {"time": "2026-03-21T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-03-21T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-03-23T05:12:55.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "pythok (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/352358", "name": "VDB-352358 | janmojzis tinyssh Ed25519 Signature crypto_sign_ed25519_tinyssh.c signature verification", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/352358/cti", "name": "VDB-352358 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/774687", "name": "Submit #774687 | GitHub tinyssh 20250501 Cryptographic Issues", "tags": ["third-party-advisory"]}, {"url": "https://github.com/janmojzis/tinyssh/issues/101", "tags": ["issue-tracking"]}, {"url": "https://github.com/janmojzis/tinyssh/pull/102", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/janmojzis/tinyssh/issues/101#issue-3983586116", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/janmojzis/tinyssh/commit/9c87269607e0d7d20174df742accc49c042cff17", "tags": ["patch"]}, {"url": "https://github.com/janmojzis/tinyssh/releases/tag/20260301", "tags": ["patch"]}, {"url": "https://github.com/janmojzis/tinyssh/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-23T15:33:32.521628Z", "id": "CVE-2026-4541", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T15:33:50.378Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4541", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-23T15:33:32.521628Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T15:33:46.444Z"}}], "cna": {"tags": ["x_open-source"], "title": "janmojzis tinyssh Ed25519 Signature crypto_sign_ed25519_tinyssh.c signature verification", "credits": [{"lang": "en", "type": "reporter", "value": "pythok (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 2.5, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 2.5, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1, "vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}], "affected": [{"vendor": "janmojzis", "modules": ["Ed25519 Signature Handler"], "product": "tinyssh", "versions": [{"status": "affected", "version": "20250501"}, {"status": "unaffected", "version": "20260301"}]}], "timeline": [{"lang": "en", "time": "2026-03-01T00:00:00.000Z", "value": "Countermeasure disclosed"}, {"lang": "en", "time": "2026-03-21T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-03-21T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-03-23T05:12:55.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/352358", "name": "VDB-352358 | janmojzis tinyssh Ed25519 Signature crypto_sign_ed25519_tinyssh.c signature verification", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/352358/cti", "name": "VDB-352358 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/774687", "name": "Submit #774687 | GitHub tinyssh 20250501 Cryptographic Issues", "tags": ["third-party-advisory"]}, {"url": "https://github.com/janmojzis/tinyssh/issues/101", "tags": ["issue-tracking"]}, {"url": "https://github.com/janmojzis/tinyssh/pull/102", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/janmojzis/tinyssh/issues/101#issue-3983586116", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/janmojzis/tinyssh/commit/9c87269607e0d7d20174df742accc49c042cff17", "tags": ["patch"]}, {"url": "https://github.com/janmojzis/tinyssh/releases/tag/20260301", "tags": ["patch"]}, {"url": "https://github.com/janmojzis/tinyssh/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in janmojzis tinyssh up to 20250501. Impacted is an unknown function of the file tinyssh/crypto_sign_ed25519_tinyssh.c of the component Ed25519 Signature Handler. This manipulation causes improper verification of cryptographic signature. The attack is restricted to local execution. The attack's complexity is rated as high. The exploitability is considered difficult. The exploit has been published and may be used. Upgrading to version 20260301 is recommended to address this issue. Patch name: 9c87269607e0d7d20174df742accc49c042cff17. Upgrading the affected component is recommended."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-347", "description": "Improper Verification of Cryptographic Signature"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-345", "description": "Insufficient Verification of Data Authenticity"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-18T03:39:33.191Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4541", "state": "PUBLISHED", "dateUpdated": "2026-04-18T03:39:33.191Z", "dateReserved": "2026-03-21T15:10:27.592Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-03-22T08:35:03.623Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["Ed25519 Signature Handler"], "product": "tinyssh", "vendor": "janmojzis", "versions": [{"status": "affected", "version": "20250501"}, {"status": "unaffected", "version": "20260301"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw has been found in janmojzis tinyssh up to 20250501. Impacted is an unknown function of the file tinyssh/crypto_sign_ed25519_tinyssh.c of the component Ed25519 Signature Handler. This manipulation causes improper verification of cryptographic signature. The attack is restricted to local execution. The attack's complexity is rated as high. The exploitability is considered difficult. The exploit has been published and may be used. Upgrading to version 20260301 is recommended to address this issue. Patch name: 9c87269607e0d7d20174df742accc49c042cff17. Upgrading the affected component is recommended."}, {"lang": "es", "value": "Se ha encontrado una falla en janmojzis tinyssh hasta 20250501. Afectada es una funci\u00f3n desconocida del archivo tinyssh/crypto_sign_ed25519_tinyssh.c del componente Gestor de Firma Ed25519. Esta manipulaci\u00f3n causa una verificaci\u00f3n incorrecta de la firma criptogr\u00e1fica. El ataque est\u00e1 restringido a la ejecuci\u00f3n local. La complejidad del ataque se califica como alta. La explotabilidad se considera dif\u00edcil. El exploit ha sido publicado y puede ser utilizado. Se recomienda actualizar a la versi\u00f3n 20260301 para abordar este problema. Nombre del parche: 9c87269607e0d7d20174df742accc49c042cff17. Se recomienda actualizar el componente afectado. Si desea obtener la mejor calidad de datos de vulnerabilidad, puede que tenga que visitar VulDB."}], "id": "CVE-2026-4541", "lastModified": "2026-06-17T10:56:46.940", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 1.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 1.5, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.5, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-4541", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-23T15:33:32.521628Z", "version": "2.0.3"}}]}, "published": "2026-03-22T09:15:59.683", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/janmojzis/tinyssh/"}, {"source": "cna@vuldb.com", "url": "https://github.com/janmojzis/tinyssh/commit/9c87269607e0d7d20174df742accc49c042cff17"}, {"source": "cna@vuldb.com", "url": "https://github.com/janmojzis/tinyssh/issues/101"}, {"source": "cna@vuldb.com", "url": "https://github.com/janmojzis/tinyssh/issues/101#issue-3983586116"}, {"source": "cna@vuldb.com", "url": "https://github.com/janmojzis/tinyssh/pull/102"}, {"source": "cna@vuldb.com", "url": "https://github.com/janmojzis/tinyssh/releases/tag/20260301"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/774687"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/352358"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/352358/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-345"}, {"lang": "en", "value": "CWE-347"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "20250501"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "20260301"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "tinyssh", "source": "cna", "vendor": "janmojzis"}, "product": "tinyssh", "vendor": "janmojzis"}], "analysis": {"en": {"generated_at": "2026-04-18T20:06:14.601255+00:00", "value": {"mitigation_remediation": ["Upgrade to tinyssh version 20260301 or later.", "Restrict local users from executing the vulnerable tinyssh binary until the patch is applied.", "Monitor local authentication logs for unexpected or repeated signature verification failures that could indicate abuse."], "summary": {"action": "Patch Now", "impact": "Improper cryptographic signature verification"}, "threat_synthesis": {"affected_systems": "The vulnerability exists in janmojzis tinyssh versions up to 20250501, specifically in the crypto_sign_ed25519_tinyssh.c component. Upgrading to release 20260301 resolves the issue, as the patch commit 9c87269607e0d7d20174df742accc49c042cff17 has been applied to this version.", "description_and_impact": "An error in the Ed25519 signature verification routine of tinyssh leads to improper verification of cryptographic signatures. Based on the description, it is inferred that this flaw could allow a local attacker to forge signatures and potentially bypass authentication or authorization checks that depend on these signatures. Based on the description, it is inferred that the flaw is a result of limited input validation and is identified as CWE-345 and CWE-347. The impact is restricted to the local environment and does not expose the system to remote attackers. The vulnerability exists in an unknown function within the crypto_sign_ed25519_tinyssh.c component of TinySSH releases up to 20250501. Attackers must manipulate input locally; the attack has a high complexity rating and is considered difficult to exploit, yet an exploit has been published and may be used by local users.", "risk_and_exploitability": "The CVSS score is 2, indicating low severity. The empirical probability of exploitation is low, with an EPSS score of < 1%, and the vulnerability is not listed in the CISA KEV catalog. It requires local execution and is considered difficult to exploit, although an exploit has been published. Risk is therefore limited to local privilege holders, but the flaw can still allow credential replay or unauthorized actions within the local host."}}}}, "created": "2026-03-23T09:46:35.987425+00:00", "updated": "2026-04-18T20:15:09.546169+00:00", "vendors": ["janmojzis", "janmojzis$PRODUCT$tinyssh"]}