VDB

CGA-mqg9-f766-j25c

CGA-mqg9-f766-j25c PUBLISHED

Record from OSV · Published January 29, 2026

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
openssh-keysignWolfi9.2_p1-r0, 9.2
openssh-server-configWolfi9.2_p1-r0, 9.2
openssh-pam-configurationWolfi9.2_p1-r0, 9.2
openssh-serverWolfi9.2_p1-r0, 9.2
openssh-serviceChainguard9.2_p1-r0, 9.2
openssh-keysignChainguard9.2_p1-r0, 9.2
openssh-pam-configurationChainguard9.2_p1-r0, 9.2
openssh-pkcs11-helperChainguard9.2_p1-r0, 9.2
opensshWolfi9.2_p1-r0, 9.2
openssh-pam-configChainguard9.2_p1-r0, 9.2
openssh-docWolfi9.2_p1-r0, 9.2
openssh-pkcs11-helperWolfi9.2_p1-r0, 9.2

16 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
Wolfiopenssh-keysign0, 0
Wolfiopenssh-server-config0, 0
Wolfiopenssh-pam-configuration0, 0
Wolfiopenssh-server0, 0
Chainguardopenssh-service0, 0
Chainguardopenssh-keysign0, 0
Chainguardopenssh-pam-configuration0, 0
Chainguardopenssh-pkcs11-helper0, 0
Wolfiopenssh0, 0
Chainguardopenssh-pam-config0, 0
Wolfiopenssh-doc0, 0
Wolfiopenssh-pkcs11-helper0, 0
Chainguardopenssh-server-config0, 0
Chainguardopenssh-client0, 0
Chainguardopenssh-sftp-server0, 0
Chainguardopenssh-doc0, 0
Wolfiopenssh-sftp-server0, 0
Chainguardopenssh0, 0
Chainguardopenssh-sk-helper0, 0
Chainguardopenssh-server0, 0

…and 8 more

Timeline

  • Jan 29, 2026 CVE Published
  • Feb 4, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CGA-mqg9-f766-j25c
vulnetix vdb fixes CGA-mqg9-f766-j25c

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CGA-mqg9-f766-j25c/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›