EUVD-2026-94104

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...

CVE-2026-106583

Versions of OpenSSH prior to 10.6 are vulnerable to an injection flaw where the $ or ** characters can occur in a command-line username. This vulnerability is associated with CWE-99 (Improper Control of Resource Identifiers). No specific exploit details or in-the-wild exploitation information are...