CVE-2026-59995 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.2 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 16.74%

Affected Products (NVD)

Vendor	Product	Version
openbsd	openssh	𝑥 < 10.4

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

openssh

bookworm	postponed
bookworm (security)	vulnerable
bullseye	postponed
bullseye (security)	vulnerable
forky	1:10.4p1-4 fixed
sid	1:10.4p1-4 fixed
trixie	no-dsa
trixie (security)	vulnerable

Ubuntu Releases

Ubuntu Product

Codename

openssh

bionic	needs-triage
focal	needs-triage
jammy	Fixed 1:8.9p1-3ubuntu0.16 released
noble	Fixed 1:9.6p1-3ubuntu13.18 released
questing	ignored
resolute	Fixed 1:10.2p1-2ubuntu3.4 released
trusty	needs-triage
xenial	needs-triage

openssh-ssh1

bionic	ignored
focal	ignored
jammy	ignored
noble	ignored
questing	ignored
resolute	ignored

Azure Linux Releases

Azure Package

Release

openssh

Azure Linux 3.0

0:9.8p1-9.azl3

fixed

Common Weakness Enumeration

CWE-23 - Relative Path Traversal
The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Vulnerability Media Exposure

References

https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2

https://www.openssh.org/releasenotes.html#10.4p1

https://www.openwall.com/lists/oss-security/2026/07/06/5