Product

Rex (Through 1.16.1)

1 brief RSS

Rex: SSH host key vulnerability (CVE-2026-94140)

Rex versions through 1.16.1 for Perl accept unknown SSH host keys during remote rsync transfers due to a hardcoded StrictHostKeyChecking=no configuration.

Rex vulnerability ssh rsync

1c 19m ago