CVE-2026-59996

Опубликовано: 08 июл. 2026

Источник: nvd

CVSS3: 4.2

CVSS3: 5.4

EPSS Низкий

Описание

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

Ссылки

https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2
Release Notes
https://www.openssh.org/releasenotes.html#10.4p1
Release Notes
https://www.openwall.com/lists/oss-security/2026/07/06/5
Mailing List
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

Версия до 10.4 (исключая)

EPSS

Процентиль: 17%

0.0025

Низкий

4.2 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-23

Связанные уязвимости

CVE-2026-59996

CVSS3: 4.2

ubuntu

25 дней назад

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

CVE-2026-59996

CVSS3: 4.6

redhat

25 дней назад

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

CVE-2026-59996

CVSS3: 4.2

msrc

20 дней назад

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

CVE-2026-59996

CVSS3: 4.2

debian

25 дней назад

scp in OpenSSH before 10.4 may place a file in the parent directory of ...

GHSA-8v2x-fhq9-4fv3

CVSS3: 4.2

github

25 дней назад

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

EPSS

Процентиль: 17%

0.0025

Низкий

4.2 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-23