https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 15:33:29 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-106552 <p><strong>Affected:</strong> Alpaquita:23: openssh, Alpaquita:25: openssh, Alpaquita:stream: openssh, BellSoft Hardened Containers:23: openssh, BellSoft Hardened Containers:25: openssh, BellSoft Hardened Containers:stream: openssh</p> <p><strong>Affected:</strong> Alpaquita:23: openssh, Alpaquita:25: openssh, Alpaquita:stream: openssh, BellSoft Hardened Containers:23: openssh, BellSoft Hardened Containers:25: openssh, BellSoft Hardened Containers:stream: openssh</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-106552 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1376 certfr-2026-avi-1376 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1376 https://cve.radiocsirt.org/vuln/euvd-2026-384031 EUVD-2026-384031 https://cve.radiocsirt.org/vuln/euvd-2026-384031 https://cve.radiocsirt.org/vuln/fkie_cve-2026-106552 <p>In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.</p> <p>In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-106552 https://cve.radiocsirt.org/vuln/ghsa-695p-3q57-gff4 <p>In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.</p> <p>In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.</p> https://cve.radiocsirt.org/vuln/ghsa-695p-3q57-gff4 https://cve.radiocsirt.org/vuln/rhsa-2026:82247 <p>openssh: openssh: Arbitrary file write via directory traversal during sftp recursive copy openssh: openssh: Information disclosure via shared compression side-channel openssh: openssh: Command injection via unvalidated command-line username openssh: openssh: Incorrect certificate expiration times via Daylight Saving Time mishandling openssh: openssh: Denial of service via oversized decompressed packets openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding openssh: OpenSSH: Improper access control via misinterpretation of disabled configuration options openssh: openssh: sftp can write outside the destination directory from a server-supplied path openssh: openssh: &#39;$&#39; and &#39;\&#39; in a command-line username expand through %u openssh: openssh: shared LZ77 compression dictionary leaks plaintext across channels openssh: openssh: a compressed payload can expand past the maximum packet size</p> <p>openssh: openssh: Arbitrary file write via directory traversal during sftp recursive copy openssh: openssh: Information disclosure via shared compression side-channel openssh: openssh: Command injection via unvalidated command-line username openssh: openssh: Incorrect certificate expiration times via Daylight Saving Time mishandling openssh: openssh: Denial of service via oversized decompressed packets openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding openssh: OpenSSH: Improper access control via misinterpretation of disabled configuration options openssh: openssh: sftp can write outside the destination directory from a server-supplied path openssh: openssh: &#39;$&#39; and &#39;\&#39; in a command-line username expand through %u openssh: openssh: shared LZ77 compression dictionary leaks plaintext across channels openssh: openssh: a compressed payload can expand past the maximum packet size</p> https://cve.radiocsirt.org/vuln/rhsa-2026:82247 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-106552 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openssh, Ubuntu:Pro:16.04:LTS: openssh, Ubuntu:Pro:FIPS-updates:16.04:LTS: openssh, Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:Pro:18.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:Pro:20.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1 and 14 more</p> <p>In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openssh, Ubuntu:Pro:16.04:LTS: openssh, Ubuntu:Pro:FIPS-updates:16.04:LTS: openssh, Ubuntu:Pro:FIPS:16.04:LTS: openssh, Ubuntu:Pro:18.04:LTS: openssh, Ubuntu:18.04:LTS: openssh-ssh1, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssh, Ubuntu:Pro:FIPS:18.04:LTS: openssh, Ubuntu:Pro:20.04:LTS: openssh, Ubuntu:20.04:LTS: openssh-ssh1 and 14 more</p> <p>In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-106552 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3785 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service herbeizufürhen oder seine Rechte auszuweiten.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service herbeizufürhen oder seine Rechte auszuweiten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3785