CVE details
CVE-2026-106552
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.
- Score
- 4.2 medium
- Published
- 2026-10-06
- Links
- NVD · cve.org · Report wrong data
Matched ports (3)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| security/openssh-portable | openssh-portable | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-gssapi | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-hpn | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |