SUSE CVE-2026-110925

CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...

CVE-2026-110925

Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...

UBUNTU-CVE-2026-110925

Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...

CVE-2026-110925

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...

CVE-2026-110925

...

CVE-2026-110925

...

EUVD-2026-101836

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...

CVE-2026-110925

Removed by vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-110925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non- trailing backslash. When a configuration expands %u insi...

CVE-2026-110925

Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...

PT-2026-114767

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...

CVE-2026-110925: Improper Neutralization of Special Elements used in an OS Command

Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the expansion of %u in the configuration when an untrusted username containing special characters such as '$' or a non-trailing backslash is passed on the ssh command line. An attacker can execute arbitrary shell...

openssh: openssh: '$' and '\' in a command-line username expand through %u

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...