CVE-2026-59995

Опубликовано: 08 июл. 2026

Источник: nvd

CVSS3: 4.2

CVSS3: 5.4

EPSS Низкий

Описание

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

Ссылки

https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2
Release Notes
https://www.openssh.org/releasenotes.html#10.4p1
Release Notes
https://www.openwall.com/lists/oss-security/2026/07/06/5
Mailing List
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

Версия до 10.4 (исключая)

EPSS

Процентиль: 16%

0.0025

Низкий

4.2 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-23

Связанные уязвимости

CVE-2026-59995

CVSS3: 5.4

ubuntu

4 месяца назад

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

CVE-2026-59995

CVSS3: 5.4

redhat

4 месяца назад

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

CVE-2026-59995

CVSS3: 4.2

msrc

4 месяца назад

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

CVE-2026-59995

CVSS3: 5.4

debian

4 месяца назад

sftp in OpenSSH before 10.4 does not properly constrain the location o ...

GHSA-2prh-86cw-fm96

CVSS3: 4.2

github

4 месяца назад

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.

EPSS

Процентиль: 16%

0.0025

Низкий

4.2 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-23