THREAT OPS › Threat News › [NVD] CVE-2026-3184 (LOW 3.7) — A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, pot
[NVD] CVE-2026-3184 (LOW 3.7) — A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, pot
CVE-2026-3184 CVSS: 3.7 LOW Published: 2026-04-03T19:17:23.377
A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication M
MITRE ATT&CK techniques
- Pluggable Authentication ModulesT1556.003
Indicators of compromise
- CVE-2026-3184cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-3184