Maple Labs

CVE search · CVE-2026-106583

CVE-2026-106583

high 7.8

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
cve@mitre.org
Weakness
CWE-99

Severity

VersionScoreVectorSource
CVSS 3.1 low 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N cve@mitre.orgSecondary
CVSS 3.1 high 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References