medium4.2
CVE-2026-59996
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.
Impact
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openssh | before 10.4 |