CVE ID: CVE-2026-59846
Published: July 21, 2026
Description: A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.
Severity: 3.9 | LOW
More Information:
https://cvefeed.io/vuln/detail/CVE-2026-59846
CVE-2026-59846 - Libssh: libssh: information disclosure via proxycommand %r username expansion
-
Starburst-David
- Posts: 286
- Joined: Wed Feb 11, 2026 8:31 pm