CVE-2026-106589

The OpenSSH sshd daemon (versions through 10.6) is vulnerable to a Least Privilege Violation (CWE-272) in specific environments, notably QNX 6 and SCO OpenServer 5 . The flaw allows sshd-session to unexpectedly gain root privileges . This issue stems from the GatewayPorts and StreamLocalForwardin...

QNX 6.x Photon Denial Of Service / File Overwrite

QNX 6.x Photon denial of service vulnerability by cenobyte 2013 - vulnerability description: QNX setuid root /usr/photon/bin/Photon allows users to create new servers with arbitrary filenames registered with the -N parameter. Photon does not check whether files exist and/or the owner of the ile i...

QNX 6.x phfont Enumeration

QNX 6.x phfont file and directory enumeration vulnerability by cenobyte 2014 - vulnerability description: QNX setuid root /usr/photon/bin/phfont allows any non-root user to enumerate files and directories as root due to PfAttachLocalDllArgv error messages. You can discover files and directories b...