PT-2026-20975 · Libssh+3 · Libssh+3

Bzimport · Published 2026-01-01 · Updated 2026-05-19 · CVE-2026-0964

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions libssh (affected versions not specified)

Description The software contains an issue related to improper sanitation of paths received from SCP servers. This could potentially lead to security consequences.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALSA-2026:18160

ALSA-2026:18683

BDU:2026-05141

CVE-2026-0964

ECHO-E22E-7DC5-9540

OESA-2026-1492

OESA-2026-1558

OESA-2026-1559

OESA-2026-1560

OESA-2026-1561

OESA-2026-1562

OPENSUSE-SU-2026:10203-1

RHSA-2026:18160

SUSE-SU-2026:0567-1

SUSE-SU-2026:0778-1

SUSE-SU-2026:0779-1

SUSE-SU-2026:1344-1

SUSE-SU-2026:1565-1

SUSE-SU-2026:20524-1

SUSE-SU-2026:20531-1

USN-8051-1

USN-8051-2

Affected Products

Linuxmint

Red Os

Ubuntu

Libssh

References · 101

• https://osv.dev/vulnerability/openSUSE-SU-2026:10203-1 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-0964 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1344-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:18160 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1558 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1562 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8051-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:18683 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:18160 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-0968 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0567-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-0964 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0967 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20531-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0779-1 · Vendor Advisory