Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:27:04 +0000 CVE-2026-110923 — Openssh: openssh: sftp can write outside the destination directory from a server-supplied path https://db.gcve.eu/vuln/cve-2026-110923 <p><strong>Affected:</strong> Red Hat Hardened Images, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4</p> <p>A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a &#34;..&#34; basename that sftp uses as the local destination, writing outside the directory the user selected.</p> <p><strong>Affected:</strong> Red Hat Hardened Images, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4</p> <p>A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a &#34;..&#34; basename that sftp uses as the local destination, writing outside the directory the user selected.</p> https://db.gcve.eu/vuln/cve-2026-110923