CVE-2026-0964

This vulnerability is marked as RESERVED by NVD. This means that the CVE-ID is reserved for future use by the CVE Numbering Authority (CNA) or a security researcher, but the details of it are not yet publicly available yet.

This page will reflect the classification results once they are available through NVD.

Any vendor information available is shown as below.

Redhat

libssh: Improper sanitation of paths received from SCP servers

Mitigation

Do not use SCP! SCP is deprecated for several years and will be removed in future releases! If you have to, the application MUST validate the path returned from ssh_scp_request_get_filename() is the path the application requested. The libssh does not do any writing in this case.

Ubuntu

[Improper sanitation of paths received from SCP servers]

Affected Software List