CLEANSTART-2026-UA87106: Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795
Published Oct 30, 2026
·Updated
Security vulnerability affects the sonarqube package. Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795.
Affected Software
1 affected componentFixes available
cleanstart/sonarqube<26.9.0.129388-r0
26.9.0.129388-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.9.0.129388-r0
Event History
Oct 30, 2026
Advisory Published
via OSV·12:35 AM
Data Sourced
via OSV·12:35 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What would an attacker need to exploit this issue?
The CVSS vector indicates network access is required, but no privileges or user interaction are needed. Exploitation is rated as high complexity.
2
What is the expected security impact if exploitation succeeds?
The reported impact is high integrity impact, with no stated confidentiality or availability impact.
3
Can affected or fixed SonarQube versions be identified from this advisory?
No. The provided data identifies the sonarqube package but does not list affected versions, fixed versions, configuration conditions, or detection steps.