Linux Distros Unpatched Vulnerability : CVE-2026-106552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

SUSE CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

AZL-106700 CVE-2026-106552 affecting package openssh 9.8p1-10

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

DEBIAN-CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

EUVD-2026-93994

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In OpenSSH versions before 10.6 , the sftp component is vulnerable to a directory traversal flaw during a recursive copy operation . This issue can cause files to be written to unintended locations on the system. No specific exploit information or links are provided in the documents, but the vuln...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552: Relative Path Traversal

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

PT-2026-107273

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.6 Description A directory traversal issue exists in the sftp component. During a recursive copy operation, a server can trigger this flaw, allowing files to be written to unintended locations on the system...

GHSA-P498-V437-472G humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Summary @humanfs/node does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make copyAll read and copy the contents of any file readable by the process, even when that file is outside the directory being copied. Details T...

humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Summary @humanfs/node does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make copyAll read and copy the contents of any file readable by the process, even when that file is outside the directory being copied. Details T...

EUVD-2026-57816

File Browser before v2.63.22 fails to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based access controls. Attackers can copy, rename, or delete denied files by operating on their allowed parent directory,...

CVE-2026-73612 File Browser before v2.63.22 Authorization Bypass via Recursive Operations

File Browser before v2.63.22 fails to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based access controls. Attackers can copy, rename, or delete denied files by operating on their allowed parent directory,...

CVE-2026-73612

CVE-2026-73612 affects File Browser prior to v2.63.22. The flaw is failing to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based access controls by acting on an allowed parent directory. This enables copyin...