A AegiFlow
MEDIUMCVSS 4.2

CVE-2026-59996

CVE-2026-59996 updated by NVD

Modified
2026-10-27
Sources
nvd

Summary

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.