Is CVE-2026-31983 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-31983?

CVE-2026-31983 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-31983

Description

A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attacker can send a request to the SSH keys synchronization endpoint and obtain the list of users that have uploaded their public SSH keys, their groups, and the uploaded public SSH keys.