361 matches found
CVE-2026-110925
Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...
CVE-2026-110925
A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...
CVE-2026-110925
A flaw was found in OpenSSH where a username provided via the ssh command line can contain a $ character or a non-trailing backslash. If a configuration expands %u within ProxyCommand or Match exec , these characters are passed directly into the shell, potentially leading to unintended command ex...
CVE-2026-110925
...
EUVD-2026-101836
A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...
CVE-2026-110925
Removed by vendor...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the expansion of %u in the configuration when an untrusted username containing special characters such as '$' or a non-trailing backslash is passed on the ssh command line. An attacker can execute arbitrary shell...
CVE-2026-110925: Improper Neutralization of Special Elements used in an OS Command
Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583...
Linux Distros Unpatched Vulnerability : CVE-2026-110925
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non- trailing backslash. When a configuration expands %u insi...
CVE-2026-110925
A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...
UBUNTU-CVE-2026-110925
A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...
Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130149)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130149 advisory. A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the...
Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130108)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130108 advisory. A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and...
openssh: openssh: '$' and '\' in a command-line username expand through %u
A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : libssh vulnerabilities (USN-8699-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8699-1 advisory. It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long...
EulerOS 2.0 SP13 : libssh (EulerOS-SA-2026-4155)
According to the versions of the libssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel write...
EulerOS 2.0 SP13 : libssh (EulerOS-SA-2026-4064)
According to the versions of the libssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel write...
EulerOS 2.0 SP11 : libssh (EulerOS-SA-2026-4249)
According to the versions of the libssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel write...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection via the repo-server process when cloning, testing, or fetching an SSH Git repository configured with a crafted proxy URL. An attacker can execute arbitrary commands on the server by supplying a specially crafted proxy...