Sign In

CVE-2026-106583

ADVISORY - nist

Summary

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-99⁠

Improper Control of Resource Identifiers ('Resource Injection')

Impacted images

Advisories

NIST

CREATED

UPDATED

ADVISORY IDCVE-2026-106583⁠
EXPLOITABILITY SCORE

1

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-99⁠

CVSS SCORE

2.5low

Debian

CREATED

UPDATED

ADVISORY IDCVE-2026-106583⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

UPDATED

ADVISORY IDCVE-2026-106583⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium