CVE-2026-59846

Опубликовано: 07 авг. 2026

Источник: msrc

CVSS3: 3.9

EPSS Низкий

Описание

Libssh: libssh: information disclosure via proxycommand %r username expansion

EPSS

Процентиль: 2%

0.0012

Низкий

3.9 Low

CVSS3

Связанные уязвимости

CVE-2026-59846

CVSS3: 3.9

ubuntu

4 месяца назад

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

CVE-2026-59846

CVSS3: 3.9

redhat

4 месяца назад

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

CVE-2026-59846

CVSS3: 3.9

nvd

4 месяца назад

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

CVE-2026-59846

CVSS3: 3.9

debian

4 месяца назад

A flaw was found in libssh. A malicious username expanded through %r i ...

ROS-20260907-80-0011

CVSS3: 3.9

redos

2 месяца назад

Уязвимость libssh

EPSS

Процентиль: 2%

0.0012

Низкий

3.9 Low

CVSS3