https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:14:48 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-110925 <p>A flaw was found in OpenSSH. A username entered on the ssh command line can still contain &#39;$&#39; or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.</p> <p>A flaw was found in OpenSSH. A username entered on the ssh command line can still contain &#39;$&#39; or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.</p> https://db.gcve.eu/vuln/fkie_cve-2026-110925 https://db.gcve.eu/vuln/ghsa-h54q-2vm3-97qv <p>A flaw was found in OpenSSH. A username entered on the ssh command line can still contain &#39;$&#39; or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.</p> <p>A flaw was found in OpenSSH. A username entered on the ssh command line can still contain &#39;$&#39; or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.</p> https://db.gcve.eu/vuln/ghsa-h54q-2vm3-97qv https://db.gcve.eu/vuln/rhsa-2026:82247 <p>openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding openssh: openssh: sftp can write outside the destination directory from a server-supplied path openssh: openssh: &#39;$&#39; and &#39;\&#39; in a command-line username expand through %u openssh: openssh: shared LZ77 compression dictionary leaks plaintext across channels openssh: openssh: a compressed payload can expand past the maximum packet size</p> <p>openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding openssh: openssh: sftp can write outside the destination directory from a server-supplied path openssh: openssh: &#39;$&#39; and &#39;\&#39; in a command-line username expand through %u openssh: openssh: shared LZ77 compression dictionary leaks plaintext across channels openssh: openssh: a compressed payload can expand past the maximum packet size</p> https://db.gcve.eu/vuln/rhsa-2026:82247