CVE-2026-59997

Name
CVE-2026-59997
Description
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
cve@mitre.org https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2
cve@mitre.org https://www.openssh.org/releasenotes.html#10.4p1
cve@mitre.org https://www.openwall.com/lists/oss-security/2026/07/06/5

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* openssh >= None < 10.4

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
openssh edge-main 10.3_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.2_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.1_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r11 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r10 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r9 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r8 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r7 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r6 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r5 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r4 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r3 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 10.0_p1-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.9_p2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.9_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.8_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 9.6_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 8.9_p2-r0 None possibly vulnerable
openssh edge-main 8.8_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh edge-main 8.5_p1-r0 None possibly vulnerable
openssh edge-main 8.4_p1-r0 None possibly vulnerable
openssh edge-main 7.9_p1-r3 None possibly vulnerable
openssh edge-main 7.7_p1-r4 None possibly vulnerable
openssh edge-main 7.5_p1-r8 None possibly vulnerable
openssh edge-main 7.4_p1-r0 None possibly vulnerable
openssh 3.24-main 10.3_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.23-main 10.2_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r10 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r9 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r8 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 10.0_p1-r7 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.22-main 9.9_p2-r0 None possibly vulnerable
openssh 3.22-main 9.8_p1-r0 None possibly vulnerable
openssh 3.22-main 9.6_p1-r0 None possibly vulnerable
openssh 3.22-main 8.8_p1-r0 None possibly vulnerable
openssh 3.22-main 8.5_p1-r0 None possibly vulnerable
openssh 3.22-main 8.4_p1-r0 None possibly vulnerable
openssh 3.22-main 7.9_p1-r3 None possibly vulnerable
openssh 3.22-main 7.7_p1-r4 None possibly vulnerable
openssh 3.22-main 7.5_p1-r8 None possibly vulnerable
openssh 3.22-main 7.4_p1-r0 None possibly vulnerable
openssh 3.21-main 9.9_p2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.21-main 9.9_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.21-main 9.8_p1-r0 None possibly vulnerable
openssh 3.21-main 9.6_p1-r0 None possibly vulnerable
openssh 3.21-main 8.8_p1-r0 None possibly vulnerable
openssh 3.21-main 8.5_p1-r0 None possibly vulnerable
openssh 3.21-main 8.4_p1-r0 None possibly vulnerable
openssh 3.21-main 7.9_p1-r3 None possibly vulnerable
openssh 3.21-main 7.7_p1-r4 None possibly vulnerable
openssh 3.21-main 7.5_p1-r8 None possibly vulnerable
openssh 3.21-main 7.4_p1-r0 None possibly vulnerable
openssh 3.20-main 9.7_p1-r5 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.20-main 9.7_p1-r4 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.20-main 9.6_p1-r0 None possibly vulnerable
openssh 3.20-main 8.8_p1-r0 None possibly vulnerable
openssh 3.20-main 8.5_p1-r0 None possibly vulnerable
openssh 3.20-main 8.4_p1-r0 None possibly vulnerable
openssh 3.20-main 7.9_p1-r3 None possibly vulnerable
openssh 3.20-main 7.7_p1-r4 None possibly vulnerable
openssh 3.20-main 7.5_p1-r8 None possibly vulnerable
openssh 3.20-main 7.4_p1-r0 None possibly vulnerable
openssh 3.19-main 9.7_p2-r5 None possibly vulnerable
openssh 3.19-main 9.6_p1-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.19-main 9.6_p1-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.19-main 9.6_p1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
openssh 3.19-main 8.8_p1-r0 None possibly vulnerable
openssh 3.19-main 8.5_p1-r0 None possibly vulnerable
openssh 3.19-main 8.4_p1-r0 None possibly vulnerable
openssh 3.19-main 7.9_p1-r3 None possibly vulnerable
openssh 3.19-main 7.7_p1-r4 None possibly vulnerable
openssh 3.19-main 7.5_p1-r8 None possibly vulnerable
openssh 3.19-main 7.4_p1-r0 None possibly vulnerable