CVE-2026-106583

Published: Ott 07, 2026 Last Modified: Ott 07, 2026

ExploitDB:

Other exploit source:

Google Dorks:

LOW 2,5

Source: [email protected]

Attack Vector: local

Attack Complexity: high

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: none

Integrity: low

Availability: none

AI Translation Available

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Confidentiality Integrity

Potential Impacts:

Read Application Data Modify Application Data Read Files Or Directories Modify Files Or Directories

All platforms may be affected

Likelihood of Exploit: High