CVE-2026-59846 - Libssh: libssh: information disclosure via proxycommand %r username expansion
Posted: Tue Jul 21, 2026 2:27 pm
CVE ID: CVE-2026-59846
Published: July 21, 2026
Description: A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.
Severity: 3.9 | LOW
More Information:
https://cvefeed.io/vuln/detail/CVE-2026-59846
Published: July 21, 2026
Description: A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.
Severity: 3.9 | LOW
More Information:
https://cvefeed.io/vuln/detail/CVE-2026-59846