AZL-106685
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-106685.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-106685
- Upstream
- CVE-2026-106583
- Published
- 2026-10-07T00:17:20Z
- Modified
- 2026-10-07T14:17:13Z
- Summary
- CVE-2026-106583 affecting package openssh 9.8p1-10
- Details
-
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
- References