CVE-2026-35386 in OpenSSH
摘要 (英语)
In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
负责
MITRE
预定
2026-04-02
披露
2026-04-02
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354956 | OpenSSH Command Line ssh_config Local Privilege Escalation | 696 | 未定义 | 官方修复 | CVE-2026-35386 |