CVE-2026-127090
Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, SSH Public Key Cross-User Authentication Bypass
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, contain an authentication bypass vulnerability in SSH public key authentication that reuses cached key authorization decisions across usernames. Attackers holding a key authorized for one account can authenticate it, then send a signed SSH_MSG_USERAUTH_REQUEST with a different username on the same connection to log in as that account.
| CWE | CWE-305 |
| Vendor | jadaptive |
| Product | maverick synergy server |
| Published | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for jadaptive maverick synergy server
Be the first to know when new high vulnerabilities affecting jadaptive maverick synergy server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Jadaptive / Maverick Synergy Server
0 < 3.0.33 3.1.0 < 3.1.7
Jadaptive / Maverick Legacy Server
0 < 1.8.1
References
jadaptive.com: https://jadaptive.com/security/advisories/JADAPTIVE-SA-2026-001 github.com: https://github.com/sshtools/maverick-synergy/commit/f7d23182cce985e21048215e96395881295cb0bd store.jadaptive.com: https://store.jadaptive.com/app/api/releases/changes/01d04a39-0f05-4bae-842e-d2f1acc16985 store.jadaptive.com: https://store.jadaptive.com/app/api/releases/changes/ff71bdcf-a2a2-47e0-af5a-22e15af1dfa4 github.com: https://github.com/sshtools/maverick-synergy/blob/3.1.4/maverick-base/src/main/java/com/sshtools/common/auth/PublicKeyAuthentication.java#L82-L100 github.com: https://github.com/sshtools/maverick-synergy/blob/3.1.4/maverick-synergy-server/src/main/java/com/sshtools/server/AuthenticationProtocolServer.java#L185-L200 vulncheck.com: https://www.vulncheck.com/advisories/jadaptive-maverick-synergy-server-before-3.0.33-and-3.1-x-before-3.1.7-and-maverick-legacy-server-before-1.8.1-ssh-public-key-cross-user-authentication-bypass
Credits
Jadaptive Limited