CVE-2026-59997 - OpenSSH internal-sftp Argument Parsing Vulnerability

CVE Advisories
Post Reply
Starburst-David
Posts: 286
Joined: Wed Feb 11, 2026 8:31 pm

CVE-2026-59997 - OpenSSH internal-sftp Argument Parsing Vulnerability

Post by Starburst-David »

CVE ID: CVE-2026-59997
Published: July 8, 2026
Description: internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.
Severity: 4.2 | MEDIUM

More Information:
https://cvefeed.io/vuln/detail/CVE-2026-59997
 

POSTREACT(ions) SUMMARY

Post Reply

Return to “CVE Advisories”