Vulnerabilities CVE-2026-0964

CVE-2026-0964

Medium

Open

TLP:CLEAR

Libssh: improper sanitation of paths received from scp servers

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences. This is the same issue as in OpenSSH, tracked as CVE-2019-6111.

Details

CVSS Score: 5.0
CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Confidence: 90%
Published: Mar 26, 2026
Last Modified: Aug 21, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.