Severity: includes CVE-2026-35385 (CVSS 3.1 AV:N … C:H/I:H/A:H) and CVE-2026-3497 (CVSS 4.0); the rest local/low.
Verified probe 2026-10-21: ssh -o BatchMode=yes dank@192.168.0.40 → Permission denied (publickey,password)
— key auth is not installed for that account, and the same box answers on both addresses (nmap banner OpenSSH_10.0p1 Ubuntu-2ubuntu12.1, Ubuntu 24.04.4 LTS). The seven CVEs below all name a fix build of the 10.0p1 source package itself:
Action: the audit's P0 key rollout to this box first (it is the only host that still refuses keys), then apt-get upgrade past 1:10.0p1-5ubuntu5.4 — and give it a name in the inventory instead of two addresses and
an unknown OS, which is why the rest of its package set is unverified.
**Severity:** includes [CVE-2026-35385](https://ubuntu.com/security/CVE-2026-35385) (CVSS 3.1 AV:N … C:H/I:H/A:H) and [CVE-2026-3497](https://ubuntu.com/security/CVE-2026-3497) (CVSS 4.0); the rest local/low.
Verified probe 2026-10-21: `ssh -o BatchMode=yes dank@192.168.0.40` → `Permission denied (publickey,password)`
— key auth is not installed for that account, and the same box answers on both addresses (nmap banner
`OpenSSH_10.0p1 Ubuntu-2ubuntu12.1`, Ubuntu 24.04.4 LTS). The seven CVEs below all name a fix build of the
**10.0p1 source package itself**:
| CVE | Fixed in |
|---|---|
| [CVE-2025-61984](https://ubuntu.com/security/CVE-2025-61984), [CVE-2025-61985](https://ubuntu.com/security/CVE-2025-61985) | 1:10.0p1-5ubuntu5.1 (USN-8090-1) |
| [CVE-2026-3497](https://ubuntu.com/security/CVE-2026-3497) | 1:10.0p1-5ubuntu5.1 (USN-8090-1) |
| [CVE-2026-35385](https://ubuntu.com/security/CVE-2026-35385), [CVE-2026-35386](https://ubuntu.com/security/CVE-2026-35386), [CVE-2026-35387](https://ubuntu.com/security/CVE-2026-35387), [CVE-2026-35414](https://ubuntu.com/security/CVE-2026-35414) | 1:10.0p1-5ubuntu5.4 (USN-8222-1) |
**Action:** the audit's P0 key rollout to this box first (it is the only host that still refuses keys), then
`apt-get upgrade` past 1:10.0p1-5ubuntu5.4 — and give it a name in the inventory instead of two addresses and
an unknown OS, which is why the rest of its package set is `unverified`.
Source: [vuln-dankserver.md](https://gitea.franksdank.cloud/dank/command-center/src/branch/main/omp-docs/reports/vuln-dankserver.md) · audit [fleet-security-audit-2026-10-21.html](https://gitea.franksdank.cloud/dank/command-center/src/branch/main/omp-docs/reports/fleet-security-audit-2026-10-21.html)
---
cwd: /home/blank/.omp/wt/wt-20261019-125509-7c8a99d · session: 01a155bb-6474-7366-be9d-629f74af0e05
dank
self-assigned this 2026-10-21 15:59:09 -07:00
Taking ownership (agent). Blocked on one interactive step: the key rollout to the dank account on danklivingroom needs Frank's password once (or his authorized_key push); after that the upgrade past 1:10.0p1-5ubuntu5.4 runs. Also giving the box an inventory name.
**Taking ownership (agent).** Blocked on one interactive step: the key rollout to the `dank` account on danklivingroom needs Frank's password once (or his authorized_key push); after that the upgrade past 1:10.0p1-5ubuntu5.4 runs. Also giving the box an inventory name.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Severity: includes CVE-2026-35385 (CVSS 3.1 AV:N … C:H/I:H/A:H) and CVE-2026-3497 (CVSS 4.0); the rest local/low.
Verified probe 2026-10-21:
ssh -o BatchMode=yes dank@192.168.0.40→Permission denied (publickey,password)— key auth is not installed for that account, and the same box answers on both addresses (nmap banner
OpenSSH_10.0p1 Ubuntu-2ubuntu12.1, Ubuntu 24.04.4 LTS). The seven CVEs below all name a fix build of the10.0p1 source package itself:
Action: the audit's P0 key rollout to this box first (it is the only host that still refuses keys), then
apt-get upgradepast 1:10.0p1-5ubuntu5.4 — and give it a name in the inventory instead of two addresses andan unknown OS, which is why the rest of its package set is
unverified.Source: vuln-dankserver.md · audit fleet-security-audit-2026-10-21.html
cwd: /home/blank/.omp/wt/wt-20261019-125509-7c8a99d · session: 01a155bb-6474-7366-be9d-629f74af0e05
Taking ownership (agent). Blocked on one interactive step: the key rollout to the
dankaccount on danklivingroom needs Frank's password once (or his authorized_key push); after that the upgrade past 1:10.0p1-5ubuntu5.4 runs. Also giving the box an inventory name.