internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

...

PT-2026-56288

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.4 Description The internal-sftp component in sshd only recognizes the first 9 command-line arguments. This limitation may compromise security properties if critical configuration arguments are placed beyond the nin...

PT-2025-28392 · Siemens · Simatic Cn 4100

Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V4.0 Description: A vulnerability has been identified that allows an attacker to control the device by storing arbitrary files in the SFTP folder, potentially causing a denial of service condition...

Updated erlang packages fix security vulnerability

SSH SFTP packet size not verified properly in Erlang OTP. CVE-2025-26618...

Linux Distros Unpatched Vulnerability : CVE-2021-36370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor...

PT-2024-21075 · Infinera · Infinera Tnms

Name of the Vulnerable Software and Affected Versions: Infinera TNMS Transcend Network Management System version 19.10.3 Description: The issue is related to an insecure default configuration of the internal SFTP server on Linux servers, which allows a remote attacker to access files and...