CVE details
CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
- Score
- 2.5 low
- Published
- 2026-10-07
- Links
- NVD · cve.org · Report wrong data
Matched ports (3)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| security/openssh-portable | openssh-portable | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-gssapi | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-hpn | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |