Skip to content
Threat Feed
Subscribe

Tag

Sshd

1 brief RSS
medium advisory

OpenSSH internal-sftp Vulnerability (CVE-2026-59997) Allows Security Property Bypass

CVE-2026-59997 describes a vulnerability in the internal-sftp component of OpenSSH's sshd service, affecting versions before 10.4, where the service only processes the first nine command-line arguments, potentially leading to a bypass of security controls or unintended configuration.

OpenSSH sshd internal-sftp < 10.4 vulnerability openssh sshd sftp linux macos
1c