Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-35386

Опубликовано: 25 сент. 2026
Источник: msrc
CVSS3: 3.6
EPSS Низкий

Описание

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.

EPSS

Процентиль: 26%
0.00324
Низкий

3.6 Low

CVSS3

Связанные уязвимости

CVSS3: 8.1
ubuntu
7 месяцев назад

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.

CVSS3: 3.6
redhat
7 месяцев назад

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.

CVSS3: 8.1
nvd
7 месяцев назад

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.

CVSS3: 8.1
debian
7 месяцев назад

In OpenSSH before 10.3, command execution can occur via shell metachar ...

CVSS3: 3.6
github
7 месяцев назад

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.

EPSS

Процентиль: 26%
0.00324
Низкий

3.6 Low

CVSS3