PT-2026-37243 · Pypi · Paramiko

CVE-2026-44405 · Published 2026-05-05 · Updated 2026-07-17

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Paramiko versions prior to 4.0.0 a448945

Description The rsakey.py file allows the use of the SHA-1 algorithm, which is a cryptographic hash function that is no longer considered secure against well-funded attackers.

Recommendations Update to version 4.0.0 a448945 or later.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CLEANSTART-2026-AN24336

CLEANSTART-2026-AZ09261

CLEANSTART-2026-FU07345

CLEANSTART-2026-IR98353

CLEANSTART-2026-KE11953

CLEANSTART-2026-NM83456

CLEANSTART-2026-QE89118

CLEANSTART-2026-WQ85001

CVE-2026-44405

GHSA-R374-RXX8-8654

OPENSUSE-SU-2026:11025-1

OPENSUSE-SU-2026:21127-1

PYSEC-2026-2858

SUSE-SU-2026:22192-1

SUSE-SU-2026:3031-1

SUSE-SU-2026:3093-1

Affected Products

Paramiko

References · 276

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44405.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-26007 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-69229 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-52304 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-QE89118 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-WQ85001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-69228 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-4539 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-25645 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44405 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-48526 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-44405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34520 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0994 · Security Note